feat(client): add API key authentication for /authz endpoint #294

2026-03-12T07:24:10Z

argoyle commented

2026-03-12 07:24:10 +00:00

Summary

Add WithAPIKey(key string) option to PrivilegeHandler
When set, Fetch() sends Authorization: Bearer <key> header
Backward compatible: no key = no header (existing behavior)

Test plan

Unit test verifying Authorization header is sent
Unit test verifying no header without key
Existing tests still pass

🤖 Generated with Claude Code

## Summary - Add `WithAPIKey(key string)` option to `PrivilegeHandler` - When set, `Fetch()` sends `Authorization: Bearer <key>` header - Backward compatible: no key = no header (existing behavior) ## Test plan - [x] Unit test verifying Authorization header is sent - [x] Unit test verifying no header without key - [x] Existing tests still pass 🤖 Generated with [Claude Code](https://claude.com/claude-code)

argoyle added 1 commit 2026-03-12 07:24:12 +00:00

feat(client): add API key authentication for /authz endpoint

authz_client / test (pull_request) Successful in 1m50s

Details

authz_client / vulnerabilities (pull_request) Successful in 1m57s

Details

pre-commit / pre-commit (pull_request) Successful in 5m30s

Details

9cdb09add4

Add WithAPIKey option to set a Bearer token on requests to the
authz-service /authz endpoint. When set, Fetch() includes an
Authorization header. Backward compatible - no key means no header.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

argoyle scheduled this pull request to auto merge when all checks succeed 2026-03-12 07:24:39 +00:00

gitea-actions bot commented

2026-03-12 07:26:03 +00:00

Coverage Report

Total coverage: 97.5%

## Coverage Report Total coverage: **97.5%**

argoyle added 1 commit 2026-03-12 07:26:23 +00:00

fix(client): resolve race condition in Process event handler

authz_client / vulnerabilities (pull_request) Successful in 1m38s

Details

authz_client / test (pull_request) Successful in 1m50s

Details

pre-commit / pre-commit (pull_request) Successful in 5m11s

Details

e24a339046

Move lock acquisition to the top of Process() instead of per-case.
Previously UserAdded and UserRemoved read the privileges map without
holding any lock, causing data races with concurrent Fetch/IsAllowed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

gitea-actions bot commented

2026-03-12 07:28:28 +00:00