Test

Merged
SW
4mo ago
+101-2

Summary by cubic

Enforces API key expiry for x-api-key auth. Expired keys now return 401; existing non-expiring keys keep working.

  • New Features
    • Auth: Reject x-api-key requests when account_api_keys.expires_at has passed; null/unparseable means no expiry. Added isApiKeyExpired and integrated into getApiKeyAccountId.
    • Types/Tests: Added expires_at to account_api_keys in types/database.types. New unit tests for expiry handling and 401 responses.