NgTech-LTD/gns3-server
2
0
Fork 0
mirror of https://github.com/GNS3/gns3-server.git synced 2026-08-27 20:40:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix: Hard-delete API keys instead of soft delete (revoked flag)

Browse Source 
Removing the soft-delete approach — revoked keys are now deleted
from the database entirely via DELETE endpoint. This prevents the
api_keys table from accumulating stale records.
This commit is contained in:
YueGuobin 2026-06-11 23:27:43 +08:00
parent bfef0a36e3
commit 9d441517fd
No known key found for this signature in database
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
gns3server/api/routes/controller/api_keys.py
View File

@ -119,9 +119,9 @@ async def revoke_api_key(
from fastapi import HTTPException
raise HTTPException(status_code=404, detail="API key not found")
# Only the key owner can revoke it
# Only the key owner can delete it
if key.user_id != current_user.user_id:
from fastapi import HTTPException
raise HTTPException(status_code=403, detail="Cannot revoke another user's API key")
raise HTTPException(status_code=403, detail="Cannot delete another user's API key")
await api_keys_repo.revoke_api_key(api_key_id)
await api_keys_repo.delete_api_key(api_key_id)