Method CreateAPIKey

internal/identity/store.go:3386–3388

CreateAPIKey issues a fresh ACCOUNT-scoped API key for the user. expiresAt is the optional hard expiration; pass nil to issue a never-expiring key (the backward-compatible default). This is the account-tier convenience wrapper over CreateScopedAPIKey — the self-host default key.

(ctx context.Context, userID, name string, expiresAt *time.Time)

// backward-compatible default). This is the account-tier convenience wrapper
// over CreateScopedAPIKey — the self-host default key.
func (s *Store) CreateAPIKey(ctx context.Context, userID, name string, expiresAt *time.Time) (*APIKey, error) {
	return s.CreateScopedAPIKey(ctx, userID, name, ScopeAccount, "", expiresAt)
}

// CreateScopedAPIKey issues a fresh API key with an explicit scope (Slice 5a).
//   - ScopeAccount: account-wide admin; agentID must be empty; prefix e2a_acct_.