LotusGuild/tinker_tickets
4
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases Wiki Activity

Bearer API extension: list/read/comment/close + key scopes #26

Merged
jared merged 3 commits from development into main 2026-07-15 19:19:25 -04:00
Conversation 0 Commits 3 Files Changed 11
+736 -25
3 Commits
Author SHA1 Message Date
jaredandClaude Opus 4.8 d81fdf4104 Docs: document the Bearer API (endpoints, scopes) in README + admin page
Lint / PHP (phpcs PSR-12) (push) Successful in 24s
Details
Lint / JS (eslint) (push) Successful in 7s
Details
Lint / PHP requirements (version + extensions) (push) Successful in 28s
Details
Security / PHP Security (semgrep) (push) Successful in 1m23s
Details
Lint / Deploy (push) Successful in 2s
Details
Lint / Notify on failure (push) Has been skipped
Details
Lint / PHP (phpcs PSR-12) (pull_request) Successful in 19s
Details
Lint / JS (eslint) (pull_request) Successful in 6s
Details
Lint / PHP requirements (version + extensions) (pull_request) Successful in 23s
Details
Security / PHP Security (semgrep) (pull_request) Successful in 2m36s
Details
Lint / Deploy (pull_request) Has been skipped
Details
Lint / Notify on failure (pull_request) Has been skipped
Details 
- README: Bearer API table (list/read/comment/status), scope explanation,
  and the new endpoints in the API Endpoints table.
- /admin/api-keys API Usage section: scopes note + copy-paste cURL examples
  for create, list/triage, read-one, comment, and close (uses APP_DOMAIN).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-15 19:16:42 -04:00
jaredandClaude Opus 4.8 d46f8ffd77 Add Bearer API: list/read tickets, post comments, change status
Lint / PHP (phpcs PSR-12) (push) Successful in 41s
Details
Lint / JS (eslint) (push) Successful in 11s
Details
Lint / PHP requirements (version + extensions) (push) Successful in 44s
Details
Security / PHP Security (semgrep) (push) Successful in 2m47s
Details
Lint / Deploy (push) Successful in 2s
Details
Lint / Notify on failure (push) Has been skipped
Details 
Extends the Bearer-key API beyond create-only (all rate-limited, scope-
enforced, per-key-label attribution):
- GET /api/tickets_api.php: triage the queue (status/priority/host title
  match + pagination) or read one ticket + its comments. read scope.
- POST /api/ticket_comment_api.php: post a comment as the key (user_name =
  key name, linked to the key owner). read_write scope.
- POST /api/ticket_status_api.php: change/close status with workflow
  validation + requires_comment; posts the close reason in the same call,
  fires the Matrix status notification, invalidates stats. read_write scope.

Reuses TicketModel/CommentModel/WorkflowModel/NotificationHelper; a read
key cannot mutate. Reachability requires the reverse-proxy Authelia bypass
(handled separately).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-15 18:40:52 -04:00
jaredandClaude Opus 4.8 5cf5aa9591 API keys: add read/read_write scopes + admin scope selector & pagination 
Foundation for extending the Bearer API beyond create-only:
- api_keys gains a scope column (read | read_write); baseline schema updated
  and the column applied to the live DB. Existing keys default to
  read_write so the hwmon create key keeps working.
- ApiKeyModel: createKey() takes a validated scope; validateKey() always
  surfaces scope (defaults read_write); getAllKeys() is paginated
  ({keys,total,page,perPage}, key_hash stripped).
- ApiKeyAuth: expose getKeyContext() (scope/key_name/created_by/api_key_id)
  and requireScope() (403 on insufficient scope); existing return values
  unchanged.
- create_ticket_api.php: require read_write scope (a read key can't create).
- Admin /admin/api-keys: scope selector on the create form, a scope column,
  and pagination (revoked keys were stacking up).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-15 18:24:50 -04:00