erik
released this
2026-10-26 21:49:03 -05:00
| 8 commits to main since this release
Delete revoked API keys
- Breaking for repository implementers:
@evcraddock/slug-auth 1.0.0 requires ApiKeyRepository.deleteRevoked, which removes only already-revoked keys and honors owner restrictions. Update with npm install --save-exact @evcraddock/slug-auth@1.0.0 and adapt custom repository implementations to the storage contract.
- Template ZIP 0.11.0 adds Delete for revoked keys while keeping revocation separate; viewers can delete only their own keys, and admins can delete any revoked key. Existing sites must adapt the credential-management changes and regression tests, preserving authentication, CSRF, and ownership checks; a package update alone does not add the UI, and no database migration is needed.
Changelog
Changes
@evcraddock/slug-auth@1.0.0
Template artifact 0.11.0
Downloads