Method create

api/src/main/java/com/grash/service/ApiKeyService.java:42–62

(@Valid ApiKeyPostDTO apiKeyReq, User user)

    private final LicenseService licenseService;

    public Pair<ApiKey, String> create(@Valid ApiKeyPostDTO apiKeyReq, User user) {
        if (!user.getRole().getViewPermissions().contains(PermissionEntity.SETTINGS)
                || !user.getCompany().getSubscription().getSubscriptionPlan().getFeatures().contains(PlanFeatures.API_ACCESS)
                || !licenseService.hasEntitlement(LicenseEntitlement.API_ACCESS))
            throw new CustomException("Access denied", HttpStatus.FORBIDDEN);
        ApiKey apiKey =
                apiKeyMapper.fromPostDto(apiKeyReq);
        apiKey.setUser(user);

        SecureRandom secureRandom = new SecureRandom();
        byte[] key = new byte[32];
        secureRandom.nextBytes(key);
        String code = Base64.getUrlEncoder().withoutPadding().encodeToString(key);
        try {
            apiKey.setCode(Helper.hashKey(code));
        } catch (NoSuchAlgorithmException e) {
            throw new RuntimeException(e);
        }

        return Pair.of(apiKeyRepository.save(apiKey), code);
    }


    public List<ApiKey> getAll() {