golem15/summercms
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: capture exploration — apparatus dissolved into framework

Browse Source
This commit is contained in:
Jakub Zych
2026-09-28 00:39:43 +02:00
parent 7ac75b918d
commit df45520dd8
4 changed files with 80 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
.planning/todos/pending/backend-admin-api-tokens.md Normal file
View File

@@ -0,0 +1,10 @@
---
title: Backend admin personal API tokens (deferred Apparatus PersonalApiToken)
date: 2026-09-28
priority: low
area: summercms.go admin auth
---
Apparatus provides personal API tokens for backend admins (`PersonalApiToken` model, `TokenAuthenticate` + `ForceJsonResponse` middleware, token create/revoke on the backend user form). Nothing in Płytarium calls it, so it is deferred past v1. The Phase 9 `backend` guard already accepts `Authorization: Bearer` for CLI and tests.
Revisit when a Golem15 project needs scripted access to the admin API. See `.planning/notes/apparatus-dissolved-into-framework.md`.