Thomas Kosiewski f684831f56 feat: add allow list to API keys (#19972) ...

Add API key allow list to the SDK

This PR adds an allow list to API keys in the SDK. The allow list is a list of targets that the API key is allowed to access. If the allow list is empty, a default allow list with a single entry that allows access to all resources is created.

The changes include:

- Adding a default allow list when generating an API key if none is provided
- Adding allow list to the API key response in the SDK
- Converting database allow list entries to SDK format in the API response
- Adding tests to verify the default allow list behavior



Fixes #19854

2025-10-24 12:33:56 +01:00

..

awsiamrds

test(coderd/database/awsiamrds): fix unclosed pubsub (#16202)

2025-01-20 17:25:31 +00:00

db2sdk

feat: add allow list to API keys (#19972)

2025-10-24 12:33:56 +01:00

dbauthz

chore!: ensure consistent secret token generation and hashing (#20388)

2025-10-23 15:38:49 -05:00

dbfake

feat(coderd): use task data model for list (#20394)

2025-10-23 20:22:51 +03:00

dbgen

chore!: ensure consistent secret token generation and hashing (#20388)

2025-10-23 15:38:49 -05:00

dbmetrics

chore!: ensure consistent secret token generation and hashing (#20388)

2025-10-23 15:38:49 -05:00

dbmock

chore!: ensure consistent secret token generation and hashing (#20388)

2025-10-23 15:38:49 -05:00

dbpurge

fix: expire token for prebuilds user when regenerating session token (#19667)

2025-09-02 09:38:43 +01:00

dbrollup

chore: remove references to dbtestutil.WillUsePostgres (#20436)

2025-10-23 14:24:54 +02:00

dbtestutil

chore: remove references to dbtestutil.WillUsePostgres (#20436)

2025-10-23 14:24:54 +02:00

dbtime

fix(coderd/database): aggregate user engagement statistics by interval (#16150)

2025-01-16 17:34:53 +02:00

gen/dump

test: change to explicitly compiling dbcleaner on posix (#20206)

2025-10-08 16:18:02 +04:00

gentest

refactor: replace golang.org/x/exp/slices with slices (#16772)

2025-03-04 00:46:49 +11:00

migrations

feat: add allow list to API keys (#19972)

2025-10-24 12:33:56 +01:00

provisionerjobs

chore: provisioner acquirer to respect organization ID of jobs (#13874)

2024-07-11 11:26:47 -05:00

pubsub

chore: remove references to dbtestutil.WillUsePostgres (#20436)

2025-10-23 14:24:54 +02:00

queries

feat(coderd): use task data model for list (#20394)

2025-10-23 20:22:51 +03:00

sdk2db

feat: add filtering options to provisioners list (#19378)

2025-08-21 16:03:34 -04:00

.gitignore

feat: add audit logging database schema (#1225)

2022-05-02 19:30:46 +00:00

check_constraint.go

feat: add allow list to API keys (#19972)

2025-10-24 12:33:56 +01:00

connector.go

fix: use authenticated urls for pubsub (#14261)

2024-08-26 15:04:04 +00:00

constants.go

feat: allow TemplateAdmin to delete prebuilds via auth layer (#18333)

2025-06-20 17:36:32 +01:00

db_test.go

chore: remove references to dbtestutil.WillUsePostgres (#20436)

2025-10-23 14:24:54 +02:00

db.go

feat: enable soft delete for organizations (#16584)

2025-02-24 12:59:41 -05:00

dump.sql

feat: add allow list to API keys (#19972)

2025-10-24 12:33:56 +01:00

errors.go

chore: improve build deadline code (#19203)

2025-08-07 11:00:31 +10:00

foreign_key_constraint.go

chore: add user details to aibridge interception list endpoint (#20397)

2025-10-22 16:18:31 +11:00

generate.sh

chore: avoid dbmock test errors in dbgen (#10923)

2023-11-28 17:04:25 +00:00

lock.go

feat: implement reconciliation loop (#17261)

2025-04-17 09:29:29 -04:00

modelmethods_internal_test.go

feat: add allow_list to resource-scoped API tokens (#19964)

2025-10-09 14:53:08 +02:00

modelmethods.go

feat(coderd/database): add task status and status view (#20235)

2025-10-13 12:25:58 +03:00

modelqueries_internal_test.go

chore: populate connectionlog count using a separate query (#18629)

2025-07-15 15:03:30 +10:00

modelqueries.go

feat: add ended_at column to aibridge_interceptions table (#20432)

2025-10-23 13:29:05 +02:00

models.go

chore!: ensure consistent secret token generation and hashing (#20388)

2025-10-23 15:38:49 -05:00

no_slim.go

chore: avoid depending on rbac in slim builds (#17959)

2025-05-22 19:48:23 +10:00

oidcclaims_test.go

chore: remove dbmem (#18803)

2025-07-09 09:46:31 +02:00

pglocks.go

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

querier_test.go

feat(coderd): use task data model when creating a new task (#20275)

2025-10-23 19:12:09 +03:00

querier.go

chore!: ensure consistent secret token generation and hashing (#20388)

2025-10-23 15:38:49 -05:00

queries.sql.go

chore!: ensure consistent secret token generation and hashing (#20388)

2025-10-23 15:38:49 -05:00

sqlc.yaml

fix(coderd/database): add missing columns to tasks with status (#20311)

2025-10-15 16:34:33 +00:00

tx_test.go

chore: add tx metrics and logs for serialization errors (#15215)

2024-10-25 12:14:15 -04:00

tx.go

chore: add tx metrics and logs for serialization errors (#15215)

2024-10-25 12:14:15 -04:00

types.go

feat: add allow_list to resource-scoped API tokens (#19964)

2025-10-09 14:53:08 +02:00

unique_constraint.go

fix(coderd/database): ensure task name uniqueness (#20236)

2025-10-13 12:42:38 +03:00