Function CreateAPIKey

core/http/auth/apikeys.go:51–72

CreateAPIKey generates and stores a new API key for the given user. Returns the plaintext key (shown once) and the database record.

(db *gorm.DB, userID, name, role, hmacSecret string, expiresAt *time.Time)

// CreateAPIKey generates and stores a new API key for the given user.
// Returns the plaintext key (shown once) and the database record.
func CreateAPIKey(db *gorm.DB, userID, name, role, hmacSecret string, expiresAt *time.Time) (string, *UserAPIKey, error) {
	plaintext, hash, prefix, err := GenerateAPIKey(hmacSecret)
	if err != nil {
		return "", nil, err
	}

	record := &UserAPIKey{
		ID:        uuid.New().String(),
		UserID:    userID,
		Name:      name,
		KeyHash:   hash,
		KeyPrefix: prefix,
		Role:      role,
		ExpiresAt: expiresAt,
	}

	if err := db.Create(record).Error; err != nil {
		return "", nil, fmt.Errorf("failed to store API key: %w", err)
	}

	return plaintext, record, nil
}

// ValidateAPIKey looks up an API key by hashing the plaintext and searching
// the database. Returns the key record if found, or an error.