first commit

backend/models/ApiKey.js

@@ -0,0 +1,139 @@
+const { query } = require('../database/db');
+const { hashApiKey, generateApiKey } = require('../middleware/auth');
+
+class ApiKey {
+    /**
+     * Create a new API key
+     * @param {object} keyData - Key data
+     * @returns {object} - Created key with plain key (shown once)
+     */
+    static async create(keyData) {
+        try {
+            const { name, description, createdBy, expiresAt, rateLimit, allowedIps } = keyData;
+            const key = generateApiKey();
+            const keyHash = hashApiKey(key);
+            const id = 'apk_' + Date.now();
+
+            await query(`
+                INSERT INTO api_keys (
+                    id, key_hash, name, description, created_by,
+                    expires_at, rate_limit, allowed_ips
+                ) VALUES ($1, $2, $3, $4, $5, $6, $7, $8)
+            `, [
+                id,
+                keyHash,
+                name,
+                description || null,
+                createdBy || null,
+                expiresAt || null,
+                rateLimit || 1000,
+                allowedIps || null
+            ]);
+
+            // Return the plain key ONCE (never stored)
+            return {
+                id,
+                key,  // Plain key - show only once
+                name,
+                createdAt: new Date().toISOString()
+            };
+        } catch (error) {
+            console.error('Error creating API key:', error);
+            throw error;
+        }
+    }
+
+    /**
+     * Get all API keys (without plain keys)
+     * @returns {array} - All API keys
+     */
+    static async getAll() {
+        try {
+            const result = await query(`
+                SELECT id, name, description, created_by, is_active,
+                       created_at, last_used_at, expires_at, rate_limit
+                FROM api_keys
+                ORDER BY created_at DESC
+            `, []);
+            return result.rows.map(this.formatRecord);
+        } catch (error) {
+            console.error('Error getting all API keys:', error);
+            throw error;
+        }
+    }
+
+    /**
+     * Get API key by ID
+     * @param {string} id - Key ID
+     * @returns {object|null} - API key or null
+     */
+    static async getById(id) {
+        try {
+            const result = await query(`
+                SELECT id, name, description, created_by, is_active,
+                       created_at, last_used_at, expires_at, rate_limit, allowed_ips
+                FROM api_keys
+                WHERE id = $1
+            `, [id]);
+            if (result.rows.length === 0) return null;
+            return this.formatRecord(result.rows[0]);
+        } catch (error) {
+            console.error('Error getting API key by ID:', error);
+            throw error;
+        }
+    }
+
+    /**
+     * Update API key status (activate/deactivate)
+     * @param {string} id - Key ID
+     * @param {boolean} isActive - Active status
+     * @returns {object|null} - Updated key or null
+     */
+    static async updateStatus(id, isActive) {
+        try {
+            const result = await query('UPDATE api_keys SET is_active = $1 WHERE id = $2', [isActive ? 1 : 0, id]);
+            if (result.rowCount === 0) return null;
+            return this.getById(id);
+        } catch (error) {
+            console.error('Error updating API key status:', error);
+            throw error;
+        }
+    }
+
+    /**
+     * Delete an API key
+     * @param {string} id - Key ID
+     * @returns {boolean} - True if deleted
+     */
+    static async delete(id) {
+        try {
+            const result = await query('DELETE FROM api_keys WHERE id = $1', [id]);
+            return result.rowCount > 0;
+        } catch (error) {
+            console.error('Error deleting API key:', error);
+            throw error;
+        }
+    }
+
+    /**
+     * Format database record to camelCase
+     * @param {object} record - Database record
+     * @returns {object} - Formatted record
+     */
+    static formatRecord(record) {
+        return {
+            id: record.id,
+            name: record.name,
+            description: record.description,
+            createdBy: record.created_by,
+            isActive: Boolean(record.is_active),
+            createdAt: record.created_at,
+            lastUsedAt: record.last_used_at,
+            expiresAt: record.expires_at,
+            rateLimit: record.rate_limit,
+            allowedIps: record.allowed_ips
+        };
+    }
+}
+
+module.exports = ApiKey;