Skip to content

Conversation

rsp2k
Copy link

@rsp2k rsp2k commented Sep 7, 2025

  • Add configuration parameter for initial admin API key
  • Implement getInitialAdminApiToken() method in AbstractMultiPlatformMigration
  • Create migration to automatically generate admin API token on initial setup

Ryan Malloy and others added 3 commits September 7, 2025 08:38
- Add configuration parameter for initial admin API key
- Implement getInitialAdminApiToken() method in AbstractMultiPlatformMigration
- Create migration to automatically generate admin API token on initial setup
- Add CLAUDE.md to .gitignore for local development documentation
- Document environment variable in configuration.md
- Add section to API authentication documentation
- Include examples in Docker installation guide for both SQLite and MySQL setups
- Provide usage instructions for CI/CD and automated deployments
@jbtronics
Copy link
Member

What is your use case for this?
I don't have much of a problem with such a feature, but I never thought that having an API key from the start would be useful?

And maybe a console command to programmatically create API keys would be more useful than doing that in the database migration ?

@rsp2k
Copy link
Author

rsp2k commented Sep 19, 2025

I'm using it to bootstrap servers while testing. Thank you so much for this absolutely wonderful project! Hats off to you sir!

@jbtronics
Copy link
Member

jbtronics commented Sep 23, 2025

What would you say about restricting the lifetime of the API token to a week (or even just a day)?
That should be enough for testing and bootstrapping applications and should improve security, as you do not risk unauthorized access, if you somehow forget this token or its secret get leaked.

Also I would not put the env into the docker-env templates. That is an feature for advanced usecases, and if you put it into the docker-compose file, then it will probably stay there forever, risking it to be leaked somehow...

This comment was marked as off-topic.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants