Thomas Kosiewski b60ae0a0c4 refactor: add wildcard scope entries for API key scopes (#20032) ...

# Add API Key Scope Wildcards

This PR adds wildcard API key scopes (`resource:*`) for all RBAC resources to ensure every resource has a matching wildcard value. It also adds all individual `resource:action`​ scopes to the API documentation and TypeScript definitions.

The changes include:

- Adding a new database migration (000377) that adds wildcard API key scopes
- Updating the API documentation to include all available scopes
- Enhancing the scope generation scripts to include all resource wildcards
- Updating the TypeScript definitions to match the expanded scope list

These changes make creating API keys with comprehensive permissions for specific resource types easier.

2025-10-06 12:08:17 +02:00

..

agentapi

feat: remove agent name from app URLs (#19750)

2025-09-26 12:25:58 -05:00

agentmetrics

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

apidoc

refactor: add wildcard scope entries for API key scopes (#20032)

2025-10-06 12:08:17 +02:00

apikey

feat: add multi-scope support to API keys (#19917)

2025-09-26 11:56:34 +02:00

appearance

fix: make cli respect deployment --docs-url (#14568)

2024-09-18 21:47:53 +10:00

audit

chore: mark workspace apps and workspace agents as unaudited (#18761)

2025-07-15 16:08:42 +10:00

autobuild

fix: fix TestExecutorAutostartSkipsWhenNoProvisionersAvailable flake, part 2 (#19649)

2025-09-01 08:52:34 -07:00

awsidentity

fix: add new aws regions to instance identity (#10434)

2023-10-30 19:44:29 +00:00

azureidentity

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

coderdtest

feat: add external API key scopes (#19916)

2025-09-26 11:43:32 +02:00

connectionlog

chore!: route connection logs to new table (#18340)

2025-07-15 14:36:06 +10:00

cryptokeys

chore: update to coder/quartz v0.2.0 (#18007)

2025-05-27 16:05:03 +04:00

database

refactor: add wildcard scope entries for API key scopes (#20032)

2025-10-06 12:08:17 +02:00

devtunnel

chore: disable devtunnel tests on windows (#18521)

2025-06-24 19:01:29 +10:00

dynamicparameters

feat(coderd): add ability to search org members by user_id, is_system, github_user_id (#20048)

2025-09-30 23:54:21 +01:00

entitlements

feat(coderd): add support for external agents to API's and provisioner (#19286)

2025-08-19 10:41:33 +02:00

externalauth

feat: add best effort attempt to revoke oauth access token in external auth provider (#19775)

2025-09-19 16:27:02 +02:00

files

fix: remove hold WaitGroup in TestConcurrentFetch (#19617)

2025-09-03 09:25:49 +04:00

gitsshkey

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

healthcheck

fix: remove initial global HTTP client usage (#20128)

2025-10-02 11:43:13 -06:00

httpapi

chore: bring back x-auth-checks with a length limit (#19928)

2025-09-24 10:46:50 -06:00

httpmw

feat(coderd): add ability to search org members by user_id, is_system, github_user_id (#20048)

2025-09-30 23:54:21 +01:00

idpsync

feat(coderd): add ability to search org members by user_id, is_system, github_user_id (#20048)

2025-09-30 23:54:21 +01:00

jobreaper

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

jwtutils

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

mcp

fix: remove initial global HTTP client usage (#20128)

2025-10-02 11:43:13 -06:00

metricscache

test: fix TestCache_DeploymentStats flake (#19683)

2025-09-08 12:07:38 +10:00

notifications

feat: add notification for task status (#19965)

2025-09-29 16:44:53 +01:00

oauth2provider

feat: publish RBAC scopes in OAuth2 metadata endpoints (#19942)

2025-09-26 12:15:36 +02:00

oauthpki

fix(coderd): correct the name of the unmarshall error variable (#20150)

2025-10-03 12:08:15 +10:00

portsharing

fix: properly convert max port share level for oss (#13261)

2024-05-13 14:37:51 -04:00

pproflabel

chore: add usage tracking package (#19095)

2025-08-16 01:31:00 +10:00

prebuilds

feat: claim prebuilds based on workspace parameters instead of preset id (#19279)

2025-08-20 11:02:53 +02:00

prometheusmetrics

chore: refactor instance identity to be a SessionTokenProvider (#19566)

2025-09-03 10:38:42 +04:00

promoauth

fix: remove initial global HTTP client usage (#20128)

2025-10-02 11:43:13 -06:00

provisionerdserver

feat: add tooltip field to workspace app that renders as markdown (#19651)

2025-09-10 11:01:54 -05:00

provisionerkey

chore: shorten provisioner key (#14017)

2024-07-25 16:08:12 -05:00

proxyhealth

feat: add csp headers for embedded apps (#18374)

2025-06-17 09:00:32 -08:00

pubsub

feat(coderd): add inbox notifications endpoints (#16889)

2025-03-18 00:02:47 +01:00

rbac

test: fix rbac benchmark to test performance instead of cache (#20097)

2025-10-01 13:23:51 -05:00

render

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

runtimeconfig

chore(coderd/runtimeconfig): remove dbmem from tests (#18790)

2025-07-08 14:31:05 +00:00

schedule

chore: improve build deadline code (#19203)

2025-08-07 11:00:31 +10:00

searchquery

feat(coderd): add ability to search org members by user_id, is_system, github_user_id (#20048)

2025-09-30 23:54:21 +01:00

taskname

fix(coderd/taskname): ensure generated name is within 32 byte limit (#19612)

2025-08-28 12:58:02 +01:00

telemetry

fix: remove initial global HTTP client usage (#20128)

2025-10-02 11:43:13 -06:00

testdata

feat: include template variables in dynamic parameter rendering (#18819)

2025-07-21 13:02:31 -05:00

tracing

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

updatecheck

chore(coderd/updatecheck): remove dbmem from tests (#18792)

2025-07-08 14:32:46 +00:00

usage

chore: add unknown usage event type error (#19436)

2025-08-22 16:32:35 +10:00

userpassword

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

util

fix(coderd): truncate task prompt to 160 characters in notifications (#20147)

2025-10-02 19:54:07 +01:00

webpush

chore: remove unnecessary redeclarations in for loops (part 2) (#18593)

2025-06-26 12:28:00 -06:00

workspaceapps

feat: remove agent name from app URLs (#19750)

2025-09-26 12:25:58 -05:00

workspacestats

perf: don't call GetUserByID unnecessarily for Agents metrics loops (#19395)

2025-08-21 11:01:32 -07:00

wsbuilder

feat: claim prebuilds based on workspace parameters instead of preset id (#19279)

2025-08-20 11:02:53 +02:00

wspubsub

feat: add app status tracking to the backend (#17163)

2025-03-31 10:55:44 -04:00

activitybump_test.go

chore: add standard test logger ignoring db canceled (#15556)

2024-11-18 14:09:22 +04:00

aitasks_test.go

fix(coderd): truncate task prompt to 160 characters in notifications (#20147)

2025-10-02 19:54:07 +01:00

aitasks.go

chore(coderd): update aitasks.go to leverage agentapi-sdk-go (#20159)

2025-10-03 10:17:43 +01:00

apikey_scopes_validation_test.go

feat: add multi-scope support to API keys (#19917)

2025-09-26 11:56:34 +02:00

apikey_test.go

feat: add multi-scope support to API keys (#19917)

2025-09-26 11:56:34 +02:00

apikey.go

feat: add multi-scope support to API keys (#19917)

2025-09-26 11:56:34 +02:00

apiroot.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

audit_internal_test.go

chore: add sql filter to fetching audit logs (#14070)

2024-08-01 12:07:19 -05:00

audit_test.go

chore: mark workspace apps and workspace agents as unaudited (#18761)

2025-07-15 16:08:42 +10:00

audit.go

feat: add connectionlogs API (#18628)

2025-07-15 14:55:34 +10:00

authorize_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

authorize.go

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

client_test.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

coderd_internal_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

coderd_test.go

chore(testutil): add testutil.GoleakOptions (#16070)

2025-01-08 15:38:37 +00:00

coderd.go

feat: add endpoint to list aibridge interceptions (#19929)

2025-09-27 00:20:33 +10:00

csp.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

debug_test.go

chore(cli): increase healthcheck timeout in TestSupportbundle (#17291)

2025-04-09 09:21:17 +01:00

debug.go

chore(cli): increase healthcheck timeout in TestSupportbundle (#17291)

2025-04-09 09:21:17 +01:00

deployment_test.go

fix(coderd): mark provisioner daemon psk as secret (#12322)

2024-02-27 16:33:32 +00:00

deployment.go

chore: remove chats experiment (#18535)

2025-06-25 13:03:32 +00:00

deprecated.go

chore!: remove deprecated agent v1 routes (#13486)

2024-06-11 12:22:59 +10:00

experiments_test.go

chore: revert dynamic params as a safe experiment (#17510)

2025-04-22 16:21:15 +00:00

experiments.go

fix: do not warn on valid known experiments (#18514)

2025-06-24 09:14:41 +01:00

externalauth_test.go

feat: add best effort attempt to revoke oauth access token in external auth provider (#19775)

2025-09-19 16:27:02 +02:00

externalauth.go

feat: add best effort attempt to revoke oauth access token in external auth provider (#19775)

2025-09-19 16:27:02 +02:00

files_test.go

ci: improve 'tfail in goroutine' ruleguard rule (#19682)

2025-09-04 14:28:29 +10:00

files.go

fix: handle potential DB conflict due to concurrent upload requests in postFile (#19005)

2025-07-30 13:55:30 -07:00

gitsshkey_test.go

chore: refactor instance identity to be a SessionTokenProvider (#19566)

2025-09-03 10:38:42 +04:00

gitsshkey.go

feat: add API key scope to restrict access to user data (#17692)

2025-05-15 15:32:52 +01:00

inboxnotifications_internal_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

inboxnotifications_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

inboxnotifications.go

fix(coderd): fix panics by always checking for non-nil request logger (#18228)

2025-06-12 13:50:50 +03:00

initscript_test.go

feat(coderd): add support for external agents to API's and provisioner (#19286)

2025-08-19 10:41:33 +02:00

initscript.go

feat(coderd): add support for external agents to API's and provisioner (#19286)

2025-08-19 10:41:33 +02:00

insights_internal_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

insights_test.go

chore: refactor cli and coderd to use ClientOptions (#19763)

2025-09-22 21:02:56 +04:00

insights.go

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

latencycheck.go

chore: add prometheus timing to latency endpoint (#7742)

2023-06-06 10:26:13 -05:00

mcp_http.go

chore: refactor cli and coderd to use ClientOptions (#19763)

2025-09-22 21:02:56 +04:00

members_test.go

feat(coderd): add ability to search org members by user_id, is_system, github_user_id (#20048)

2025-09-30 23:54:21 +01:00

members.go

feat(coderd): add ability to search org members by user_id, is_system, github_user_id (#20048)

2025-09-30 23:54:21 +01:00

notifications_test.go

feat: support custom notifications (#19751)

2025-09-11 15:08:57 +02:00

notifications.go

feat: support custom notifications (#19751)

2025-09-11 15:08:57 +02:00

oauth2_error_compliance_test.go

feat: implement OAuth2 dynamic client registration (RFC 7591/7592) (#18645)

2025-07-03 18:33:47 +02:00

oauth2_metadata_test.go

fix: remove initial global HTTP client usage (#20128)

2025-10-02 11:43:13 -06:00

oauth2_metadata_validation_test.go

feat: implement OAuth2 dynamic client registration (RFC 7591/7592) (#18645)

2025-07-03 18:33:47 +02:00

oauth2_security_test.go

feat: implement OAuth2 dynamic client registration (RFC 7591/7592) (#18645)

2025-07-03 18:33:47 +02:00

oauth2_test.go

feat: ensure OAuth2 refresh tokens outlive access tokens (#19769)

2025-09-13 08:57:26 +02:00

oauth2.go

refactor: simplify OAuth2 authorization flow and use 302 redirects (#18923)

2025-07-20 16:22:52 +02:00

organizations_test.go

chore: protect organization endpoints with license (#14001)

2024-07-25 16:07:53 -05:00

organizations.go

chore: implement filters for the organizations query (#14468)

2024-08-28 13:24:28 -05:00

pagination_test.go

feat: add connectionlogs API (#18628)

2025-07-15 14:55:34 +10:00

pagination.go

feat: add connectionlogs API (#18628)

2025-07-15 14:55:34 +10:00

parameters_test.go

feat: make dynamic parameters opt-in by default for new templates (#19006)

2025-07-28 20:41:49 -05:00

parameters.go

fix: add heartbeat to keep dynamic params websocket open (#20026)

2025-10-02 09:32:40 -05:00

presets_test.go

feat: allow for default presets (#18445)

2025-06-24 12:19:19 +02:00

presets.go

feat: support icon and description in preset (#18977)

2025-07-28 15:02:26 +01:00

provisionerdaemons_test.go

feat: add filtering options to provisioners list (#19378)

2025-08-21 16:03:34 -04:00

provisionerdaemons.go

feat: add filtering options to provisioners list (#19378)

2025-08-21 16:03:34 -04:00

provisionerjobs_internal_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

provisionerjobs_test.go

feat: add filtering by initiator to provisioner job listing in the CLI (#20137)

2025-10-06 08:56:43 +00:00

provisionerjobs.go

feat: add filtering by initiator to provisioner job listing in the CLI (#20137)

2025-10-06 08:56:43 +00:00

roles_test.go

chore: protect organization endpoints with license (#14001)

2024-07-25 16:07:53 -05:00

roles.go

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

scopes_catalog_api_test.go

feat: add external API key scopes (#19916)

2025-09-26 11:43:32 +02:00

scopes_catalog.go

feat: add external API key scopes (#19916)

2025-09-26 11:43:32 +02:00

tailnet_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

tailnet.go

refactor: convert workspacesdk.AgentConn to an interface (#19392)

2025-08-20 10:00:44 +01:00

templates_test.go

feat(coderd): add support for external agents to API's and provisioner (#19286)

2025-08-19 10:41:33 +02:00

templates.go

chore: correct template API docs (#19228)

2025-08-19 15:14:25 +00:00

templateversions_test.go

feat(coderd): add support for external agents to API's and provisioner (#19286)

2025-08-19 10:41:33 +02:00

templateversions.go

feat(coderd): add support for external agents to API's and provisioner (#19286)

2025-08-19 10:41:33 +02:00

updatecheck_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

updatecheck.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

userauth_test.go

feat: add multi-scope support to API keys (#19917)

2025-09-26 11:56:34 +02:00

userauth.go

chore: add custom samesite options to auth cookies (#16885)

2025-04-08 14:15:14 -05:00

users_test.go

fix: check permission to update username (#20139)

2025-10-02 15:07:49 +02:00

users.go

fix: check permission to update username (#20139)

2025-10-02 15:07:49 +02:00

webpush_test.go

feat(coderd): add webpush package (#17091)

2025-03-27 10:03:53 +00:00

webpush.go

feat(coderd): add webpush package (#17091)

2025-03-27 10:03:53 +00:00

workspaceagentportshare_test.go

chore: join owner, template, and org in new workspace view (#15116)

2024-10-22 09:20:54 -05:00

workspaceagentportshare.go

docs: fix swagger documentation for DELETE port share endpoint (#18426)

2025-06-18 14:07:53 +00:00

workspaceagents_internal_test.go

fix(coderd): ensure agent WebSocket conn is cleaned up (#19711)

2025-09-05 14:26:46 +01:00

workspaceagents_test.go

chore: refactor instance identity to be a SessionTokenProvider (#19566)

2025-09-03 10:38:42 +04:00

workspaceagents.go

fix(coderd): truncate task prompt to 160 characters in notifications (#20147)

2025-10-02 19:54:07 +01:00

workspaceagentsrpc_internal_test.go

test: wait for completion before asserting in TestAgentConnectionMonitor_BuildOutdated (#19959)

2025-09-26 09:24:11 +04:00

workspaceagentsrpc_test.go

chore: refactor instance identity to be a SessionTokenProvider (#19566)

2025-09-03 10:38:42 +04:00

workspaceagentsrpc.go

chore: rename service -> coder_service, remove agent_id label (#19241)

2025-08-07 13:58:39 -05:00

workspaceapps_test.go

chore: remove unnecessary redeclarations in for loops (#18440)

2025-06-20 13:16:55 -06:00

workspaceapps.go

feat: add multi-scope support to API keys (#19917)

2025-09-26 11:56:34 +02:00

workspacebuilds_test.go

fix(coderd): add blocking GetProvisionerJobByIDWithLock for workspace build cancellation (#19737)

2025-09-08 15:40:14 +02:00

workspacebuilds.go

fix(coderd): add blocking GetProvisionerJobByIDWithLock for workspace build cancellation (#19737)

2025-09-08 15:40:14 +02:00

workspaceproxies_test.go

fix: allow ports in wildcard url configuration (#11657)

2024-01-18 09:44:05 -06:00

workspaceproxies.go

fix: allow ports in wildcard url configuration (#11657)

2024-01-18 09:44:05 -06:00

workspaceresourceauth_test.go

chore: refactor instance identity to be a SessionTokenProvider (#19566)

2025-09-03 10:38:42 +04:00

workspaceresourceauth.go

chore: add /v2 to import module path (#9072)

2023-08-18 18:55:43 +00:00

workspaces_test.go

feat: add shared_with_group: and shared_with_user: filters to /workspaces endpoint (#19875)

2025-09-19 16:05:27 -04:00

workspaces.go

feat: add workspaces/acl [delete] endpoint (#19772)

2025-09-12 12:21:01 -04:00

workspaceupdates_test.go

chore: update testutil chan helpers (#17408)

2025-04-16 10:37:09 -06:00

workspaceupdates.go

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00