API keys: log key id on every key-authenticated request #72

New issue

Open

opened 2026-10-26 10:46:00 -04:00 by vmanne-poc · 0 comments

vmanne-poc commented

2026-10-26 10:46:00 -04:00

Owner

Follow-up to #29 (Phase 13.1, v0.15.1).

#29: "Every key use is attributable (key id appears in logs)."

Plan

Each request authenticated by an API key writes a structured log line with key id, key prefix, project id, method, route and status. Never the plain key.
Keep updating last-used time.

Done when

Test shows the key id (and not the key) appears in the log for a key request.

Follow-up to #29 (Phase 13.1, v0.15.1). #29: "Every key use is attributable (key id appears in logs)." **Plan** - Each request authenticated by an API key writes a structured log line with key id, key prefix, project id, method, route and status. Never the plain key. - Keep updating last-used time. **Done when** - Test shows the key id (and not the key) appears in the log for a key request.

vmanne-poc added this to the Phase 13.1: API key scopes & provider webhooks milestone

2026-10-26 10:46:00 -04:00

vmanne-poc added the

feature

security

labels

2026-10-26 10:46:00 -04:00

vmanne-poc referenced this issue

2026-10-26 10:46:13 -04:00

Project API keys #29