Jakub Zych
3f9d3b4f11
Tag the 17 open todos with their g15office task IDs, close 7 todos that are already done or promoted to Phase 16.3, and record the sync rules and the phase-to-task map in .planning/G15OFFICE.md.
20 lines
875 B
Markdown
20 lines
875 B
Markdown
---
|
|
title: Backend admin personal API tokens (Phase 16.3)
|
|
date: 2026-09-28
|
|
priority: high
|
|
area: summercms.go admin auth
|
|
g15office: 5lcivllc
|
|
status: done
|
|
closed: 2026-10-11
|
|
---
|
|
|
|
Apparatus provides personal API tokens for backend admins (`PersonalApiToken` model, `TokenAuthenticate` + `ForceJsonResponse` middleware, token create/revoke on the backend user form). Nothing in Płytarium calls it, so it is deferred past v1. The Phase 9 `backend` guard already accepts `Authorization: Bearer` for CLI and tests.
|
|
|
|
Revisit when a Golem15 project needs scripted access to the admin API. See `.planning/notes/apparatus-dissolved-into-framework.md`.
|
|
|
|
**2026-10-10:** Promoted to Phase 16.3 (scoped tokens, Journal agent use case). No migration of Apparatus tokens.
|
|
|
|
## Closed 2026-10-11
|
|
|
|
Promoted to Phase 16.3 on 2026-10-10. The g15office task is now the Phase 16.3 milestone task.
|