API Key Config ist fertig

v2_adminpanel/init.sql

@@ -640,3 +640,65 @@ CREATE INDEX IF NOT EXISTS idx_session_history_ended_at ON session_history(ended
 INSERT INTO client_configs (client_name, api_key, current_version, minimum_version)
 VALUES ('Account Forger', 'AF-' || gen_random_uuid()::text, '1.0.0', '1.0.0')
 ON CONFLICT DO NOTHING;
+
+-- ===================== SYSTEM API KEY TABLE =====================
+-- Single API key for system-wide authentication
+CREATE TABLE IF NOT EXISTS system_api_key (
+    id INTEGER PRIMARY KEY DEFAULT 1 CHECK (id = 1),  -- Ensures single row
+    api_key VARCHAR(255) NOT NULL,
+    created_at TIMESTAMP WITH TIME ZONE DEFAULT CURRENT_TIMESTAMP,
+    regenerated_at TIMESTAMP WITH TIME ZONE,
+    last_used_at TIMESTAMP WITH TIME ZONE,
+    usage_count INTEGER DEFAULT 0,
+    created_by VARCHAR(50),
+    regenerated_by VARCHAR(50)
+);
+
+-- Function to generate API key with AF-YYYY- prefix
+CREATE OR REPLACE FUNCTION generate_api_key() RETURNS VARCHAR AS $$
+DECLARE
+    year_part VARCHAR(4);
+    random_part VARCHAR(32);
+BEGIN
+    year_part := to_char(CURRENT_DATE, 'YYYY');
+    random_part := upper(substring(md5(random()::text || clock_timestamp()::text) from 1 for 32));
+    RETURN 'AF-' || year_part || '-' || random_part;
+END;
+$$ LANGUAGE plpgsql;
+
+-- Initialize with a default API key if none exists
+INSERT INTO system_api_key (api_key, created_by)
+SELECT generate_api_key(), 'system'
+WHERE NOT EXISTS (SELECT 1 FROM system_api_key);
+
+-- Audit trigger for API key changes
+CREATE OR REPLACE FUNCTION audit_api_key_changes() RETURNS TRIGGER AS $$
+BEGIN
+    IF TG_OP = 'UPDATE' AND OLD.api_key != NEW.api_key THEN
+        INSERT INTO audit_log (
+            timestamp,
+            username,
+            action,
+            entity_type,
+            entity_id,
+            old_values,
+            new_values,
+            additional_info
+        ) VALUES (
+            CURRENT_TIMESTAMP,
+            COALESCE(NEW.regenerated_by, 'system'),
+            'api_key_regenerated',
+            'system_api_key',
+            NEW.id,
+            jsonb_build_object('api_key', LEFT(OLD.api_key, 8) || '...'),
+            jsonb_build_object('api_key', LEFT(NEW.api_key, 8) || '...'),
+            'API Key regenerated'
+        );
+    END IF;
+    RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE TRIGGER audit_system_api_key_changes
+AFTER UPDATE ON system_api_key
+FOR EACH ROW EXECUTE FUNCTION audit_api_key_changes();