Add TOTP-gated provider API key reveal

Allow super administrators to inspect effective provider credentials only after audited, rate-limited step-up verification.
2026-08-22 17:56:35 +08:00
parent 636a8541bc
commit 544e0d7356
14 changed files with 524 additions and 6 deletions
@@ -420,6 +420,7 @@ private val EXPECTED_PUBLIC_PATHS = setOf(
    "/v1/admin/auth/logout",
    "/v1/admin/providers",
    "/v1/admin/providers/{providerId}/api-key",
+    "/v1/admin/providers/{providerId}/api-key/reveal",
    "/v1/admin/overview",
    "/v1/admin/referrals",
    "/v1/admin/analytics",