balena-io / open-balena-api

The core API of openBalena
https://balena.io/open
GNU Affero General Public License v3.0
58 stars 29 forks source link

Require a freshly authenticated JWT when creating a user api_key #1650

Closed thgreasi closed 1 month ago

thgreasi commented 3 months ago

Depends-on: https://github.com/balena-io/balena-ui/pull/6638 Change-type: major See: https://balena.zulipchat.com/#narrow/stream/345885-aspect.2Fsecurity/topic/Requiring.20a.20sudo.20token.20when.20creating.20a.20new.20api.20key/near/441432122 See: https://balena.fibery.io/Work/Project/Require-SUDO-privileges-when-creating-an-api-key-605