Files
summercms/.planning/todos/done/backend-admin-api-tokens.md
Jakub Zych 3f9d3b4f11 docs: sync todos with g15office and map phases to milestone tasks
Tag the 17 open todos with their g15office task IDs, close 7 todos that
are already done or promoted to Phase 16.3, and record the sync rules
and the phase-to-task map in .planning/G15OFFICE.md.
2026-10-11 02:01:50 +02:00

875 B

title, date, priority, area, g15office, status, closed
title date priority area g15office status closed
Backend admin personal API tokens (Phase 16.3) 2026-09-28 high summercms.go admin auth 5lcivllc done 2026-10-11

Apparatus provides personal API tokens for backend admins (PersonalApiToken model, TokenAuthenticate + ForceJsonResponse middleware, token create/revoke on the backend user form). Nothing in Płytarium calls it, so it is deferred past v1. The Phase 9 backend guard already accepts Authorization: Bearer for CLI and tests.

Revisit when a Golem15 project needs scripted access to the admin API. See .planning/notes/apparatus-dissolved-into-framework.md.

2026-10-10: Promoted to Phase 16.3 (scoped tokens, Journal agent use case). No migration of Apparatus tokens.

Closed 2026-10-11

Promoted to Phase 16.3 on 2026-10-10. The g15office task is now the Phase 16.3 milestone task.