apikeys

type APIKeyRecord struct {
	ID         string
	Label      string
	CreatedAt  time.Time
	LastUsedAt *time.Time
	RevokedAt  *time.Time

	// Scopes nil is a full-access key. A non-nil list (possibly empty)
	// limits the key to what the scopes grant.
	Scopes []string
	// EnvID limits a scoped key to one environment and its forks. Empty
	// means any environment.
	EnvID string
	// ExpiresAt is when the key stops authenticating. Nil means never.
	ExpiresAt *time.Time
	// ActorID and ActorName pin the actor every request on the key is
	// recorded as. Empty ActorID means no pinned actor.
	ActorID   string
	ActorName string
	// CreatedBy is the principal that minted the key: "master" or a key id.
	CreatedBy string

	// FirstUse is set by Authenticate on the request that used the key for
	// the first time. It is not stored.
	FirstUse bool
}

type APIKeyStore struct {
	// contains filtered or unexported fields
}

type NewKey struct {
	Label     string
	Scopes    []string
	EnvID     string
	ExpiresAt *time.Time
	ActorID   string
	ActorName string
	CreatedBy string
}