[email protected]andClaude Opus 4.6 27c43e185f feat(web): DB-backed auth, user/token/invitation API handlers ...

Adds the web gateway layer for DB-backed user management (#1605):

Auth refactor:
- CombinedAuthState wraps env-var tokens (MultiAuthState) + optional
  DbAuthenticator for DB-backed token lookup with LRU cache (60s TTL,
  1024 max entries)
- auth_middleware tries env-var tokens first, then DB fallback
- From<MultiAuthState> impl for backward compatibility
- main.rs wires with_db_auth when database is available

API handlers (12 new endpoints):
- /api/admin/users — CRUD: create, list, detail, update, suspend, activate
- /api/tokens — create (returns plaintext once), list, revoke
- /api/invitations — create, list, accept (creates user + first token)

Token creation: 32 random bytes → hex plaintext, SHA-256 hash stored.
Invitation accept: validates hash + pending + not expired, creates
user record and first API token atomically.

All test files updated for CombinedAuthState type change.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

2026-03-24 14:31:02 -07:00

..

assertions.rs

Add generic host-verified /webhook/tools/{tool} ingress (#757)

2026-03-11 03:36:25 +00:00

cleanup.rs

Trajectory benchmarks and e2e trace test rig (#553)

2026-03-05 09:13:09 +00:00

gateway_workflow_harness.rs

feat(web): DB-backed auth, user/token/invitation API handlers

2026-03-24 14:31:02 -07:00

instrumented_llm.rs

Trajectory benchmarks and e2e trace test rig (#553)

2026-03-05 09:13:09 +00:00

metrics.rs

Trajectory benchmarks and e2e trace test rig (#553)

2026-03-05 09:13:09 +00:00

mock_mcp_server.rs

fix(mcp): open MCP OAuth in same browser as gateway (#951)

2026-03-12 11:16:23 -07:00

mock_openai_server.rs

Migrate GitHub webhook normalization into github tool (#758)

2026-03-12 01:52:47 +00:00

mod.rs

fix(mcp): open MCP OAuth in same browser as gateway (#951)

2026-03-12 11:16:23 -07:00

test_channel.rs

feat: chat onboarding and routine advisor (#927)

2026-03-19 22:20:34 -07:00

test_rig.rs

fix(agent): persist /model selection to .env, TOML, and DB (#1581)

2026-03-23 22:24:26 -07:00

trace_llm.rs

fix(safety): escape tool output XML content and remove misleading sanitized attr (#1067)

2026-03-21 20:51:03 -07:00