feat: add persistent API token lifecycle
This commit is contained in:
@@ -9,8 +9,8 @@ Proxmox compatibility.
|
||||
| Level | Methods | Contract share | Evidence |
|
||||
|---|---:|---:|---|
|
||||
| Declared and dynamically routed | 675 | 100% | Imported immutable API Viewer artifact |
|
||||
| Stateful semantics implemented | 13 | 1.93% | Handler registry and unit/integration tests |
|
||||
| Schema-only or explicitly unsupported | 662 | 98.07% | Default 501 fallback |
|
||||
| Stateful semantics implemented on current main | 18 | 2.67% | Handler registry and unit/integration tests |
|
||||
| Schema-only or explicitly unsupported | 657 | 97.33% | Default 501 fallback |
|
||||
| proxmoxer smoke exercised | 9 | 1.33% | Unmodified proxmoxer 2.3 compatibility test |
|
||||
|
||||
The smoke set is `POST /access/ticket`, `GET /version`, `GET /nodes`,
|
||||
|
||||
@@ -41,9 +41,9 @@ large seeding proves bounded batch operations rather than row-at-a-time inserts.
|
||||
|
||||
## G3 — authentication and authorization surface
|
||||
|
||||
- [ ] Expose API-token lifecycle and authenticate
|
||||
- [x] Expose API-token lifecycle and authenticate
|
||||
`PVEAPIToken=USER@REALM!TOKENID=SECRET` without CSRF.
|
||||
- [ ] Complete pam, pve, and test realm behavior, ticket skew/expiry and
|
||||
- [x] Complete pam, pve, and test realm behavior, ticket skew/expiry and
|
||||
credential redaction.
|
||||
- [ ] Wire users, groups, roles, ACL propagation, route-derived permissions and
|
||||
token privilege separation into every semantic handler.
|
||||
|
||||
Reference in New Issue
Block a user