Skip to content

fix: add API key authentication alongside JWT (#177)#5292

Closed
SyntaxHQDEV wants to merge 2 commits into
ClankerNation:mainfrom
SyntaxHQDEV:fix/issue-177
Closed

fix: add API key authentication alongside JWT (#177)#5292
SyntaxHQDEV wants to merge 2 commits into
ClankerNation:mainfrom
SyntaxHQDEV:fix/issue-177

Conversation

@SyntaxHQDEV

Copy link
Copy Markdown

#177 [$5k] API Key Authentication

  • Added X-API-Key header support as alternative to JWT
  • POST /auth/api-keys endpoint to generate keys (prefix: oak_)
  • DELETE /auth/api-keys/{id} to revoke keys
  • Keys stored as SHA-256 hashes
  • Graceful fallback: tries JWT first, then API key
  • Fixed JWT_SECRET to use os.environ.get() with fallback
  • Fixed jwt.decode to only allow HS256 algorithm

/bounty 5000
Closes #177

@github-actions

github-actions Bot commented Jun 8, 2026

Copy link
Copy Markdown

Unfortunately the changes in this PR didn't fully resolve the issue. Please rework your solution and submit a new pull request within 2 hours.

Make sure to review the acceptance criteria in the linked issue and verify all conditions are met before resubmitting.

@github-actions github-actions Bot closed this Jun 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[ Bounty $5k ] [ API ] Fix auth.py doesn't support API key authentication alongside JWT — mainnet prep

1 participant