mirror of
https://github.com/coder/coder.git
synced 2026-06-02 20:48:20 +00:00
Paweł Banaszewski
af0cc8d61a
Adds POST / GET / DELETE handlers for /api/v2/aibridge/coderd-keys under the existing AI Bridge feature gate. Create returns the plaintext secret exactly once (cgw_<random>... format); list returns metadata plus a short non-secret token_prefix so admins can correlate keys with the daemons presenting them. Delete identifies keys by UUID in the path and is idempotent.
46 lines
1.3 KiB
Go
46 lines
1.3 KiB
Go
package aigatewaycoderdkey
|
|
|
|
import (
|
|
"github.com/google/uuid"
|
|
"golang.org/x/xerrors"
|
|
|
|
"github.com/coder/coder/v2/coderd/apikey"
|
|
"github.com/coder/coder/v2/coderd/database"
|
|
)
|
|
|
|
const (
|
|
visiblePrefixLength = 7
|
|
privateSuffixLength = 32
|
|
|
|
// KeyTypePrefix marks a key as belonging to the Coder AI Gateway.
|
|
KeyTypePrefix = "cgw_"
|
|
|
|
// KeyPrefixLength is the total length of the visible key prefix.
|
|
KeyPrefixLength = len(KeyTypePrefix) + visiblePrefixLength
|
|
|
|
// KeyLength is the total length of the plaintext key returned to
|
|
// the user on Create.
|
|
KeyLength = KeyPrefixLength + privateSuffixLength
|
|
)
|
|
|
|
// New generates an AI Gateway Coderd key. Returns InsertParams ready
|
|
// for the database query.
|
|
//
|
|
// Key shape: "cgw_" + 7 random chars + 32 random chars = 43 chars total.
|
|
func New(name string) (database.InsertAIGatewayCoderdKeyParams, string, error) {
|
|
secret, hashed, err := apikey.GenerateSecret(KeyLength)
|
|
if err != nil {
|
|
return database.InsertAIGatewayCoderdKeyParams{}, "", xerrors.Errorf("generate secret: %w", err)
|
|
}
|
|
|
|
secret = KeyTypePrefix + secret
|
|
visiblePrefix := secret[:KeyPrefixLength]
|
|
|
|
return database.InsertAIGatewayCoderdKeyParams{
|
|
ID: uuid.New(),
|
|
Name: name,
|
|
SecretPrefix: visiblePrefix,
|
|
HashedSecret: hashed,
|
|
}, secret, nil
|
|
}
|