2 Commits

Author	SHA1	Message	Date
Michael Borohovski	04b6a2c135	Harden API token auth for deleted users and add route rate limiting	2026-03-03 15:16:03 -08:00
Michael Borohovski	61b183542c	Add per-user API tokens with admin override support ... - Add userId field to ApiToken schema (the user identity the token acts as) - Auth middleware resolves token identity via userId instead of createdById - New /api/user/api-tokens routes for self-service token management - Admin /api/admin/api-tokens routes support userId and role overrides - API Tokens section on profile page for all users - Admin API tab shows all tokens with user/role selectors	2026-03-03 12:23:57 -08:00