t5de-hub

2 Commits

Include renames

Author	SHA1	Message	Date
dhkatzandClaude Opus 5.5	2e9c2f32cb	feat(web): group the token permission picker by resource Pull request / title (pull_request) Successful in 1s Details CI / test (pull_request) Successful in 1m13s Details CI / image (apps/api/Dockerfile, t5de-hub-api) (pull_request) Skipped Details CI / image (apps/web/Dockerfile, t5de-hub-web) (pull_request) Skipped Details Each resource (Products, Members, Imports, ...) is a collapsed section with a select-all checkbox and a count of what is chosen, so the list stays short as permissions are added. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-11-05 15:37:50 -08:00
dhkatzandClaude Opus 5.5	2b88a52bcb	feat: personal API tokens Pull request / title (pull_request) Successful in 0s Details CI / test (pull_request) Successful in 1m9s Details CI / image (apps/api/Dockerfile, t5de-hub-api) (pull_request) Skipped Details CI / image (apps/web/Dockerfile, t5de-hub-web) (pull_request) Skipped Details Tokens for scripts, made, listed and revoked on the account page. Each grants some of the person's own permissions at chosen places (a product of theirs, a catalog whose team they're on, or the hub for moderators); every check is the intersection with what they hold now. Tokens work only on routes that check a permission (session-only routes answer token_not_allowed), are shown once and stored as hashes, note their last use, and mark the audit entries of what they do. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-11-05 14:58:58 -08:00