security: API Key 权限范围 + 过期时间 + 用量追踪

增强: - 权限模板: readonly / monitor / full - 每 key 独立权限列表, 注入 user['perms'] - 可选过期时间 (ttl 参数) - 过期 key 自动清理 (加载时 + 验证时) - request_count 用量追踪 - 标记 is_api_key = True Co-Authored-By: Claude <noreply@anthropic.com>
2026-06-13 14:27:07 +08:00
parent 9f6eb29820
commit b92b1cc4fc
4 changed files with 70 additions and 20 deletions
@@ -89,6 +89,6 @@ commands:
    permissions:
    - framework.command.test
    source: internal
-last_updated: 13895.634814802
+last_updated: 13989.462275548
 plugin_commands: {}
 total_commands: 18