first commit

backend/routes/apiKeys.js

@@ -0,0 +1,142 @@
+const express = require('express');
+const router = express.Router();
+const ApiKey = require('../models/ApiKey');
+
+// Note: In production, these routes should be protected by admin authentication
+// For now, they are unprotected for initial setup
+
+// POST /api/admin/api-keys - Create new API key
+router.post('/', async (req, res) => {
+    try {
+        const { name, description, createdBy, expiresAt, rateLimit, allowedIps } = req.body;
+
+        if (!name) {
+            return res.status(400).json({
+                success: false,
+                error: 'name is required'
+            });
+        }
+
+        const apiKey = await ApiKey.create({
+            name,
+            description,
+            createdBy,
+            expiresAt,
+            rateLimit,
+            allowedIps
+        });
+
+        res.status(201).json({
+            success: true,
+            data: apiKey,
+            warning: 'Save this key securely. It will not be shown again.'
+        });
+    } catch (error) {
+        console.error('Error creating API key:', error);
+        res.status(500).json({
+            success: false,
+            error: error.message
+        });
+    }
+});
+
+// GET /api/admin/api-keys - List all API keys
+router.get('/', async (req, res) => {
+    try {
+        const keys = await ApiKey.getAll();
+        res.json({
+            success: true,
+            data: keys
+        });
+    } catch (error) {
+        console.error('Error getting API keys:', error);
+        res.status(500).json({
+            success: false,
+            error: error.message
+        });
+    }
+});
+
+// GET /api/admin/api-keys/:id - Get specific API key
+router.get('/:id', async (req, res) => {
+    try {
+        const key = await ApiKey.getById(req.params.id);
+        if (!key) {
+            return res.status(404).json({
+                success: false,
+                error: 'API key not found'
+            });
+        }
+        res.json({
+            success: true,
+            data: key
+        });
+    } catch (error) {
+        console.error('Error getting API key:', error);
+        res.status(500).json({
+            success: false,
+            error: error.message
+        });
+    }
+});
+
+// PUT /api/admin/api-keys/:id - Update API key status
+router.put('/:id', async (req, res) => {
+    try {
+        const { isActive } = req.body;
+
+        if (isActive === undefined) {
+            return res.status(400).json({
+                success: false,
+                error: 'isActive is required'
+            });
+        }
+
+        const key = await ApiKey.updateStatus(req.params.id, isActive);
+
+        if (!key) {
+            return res.status(404).json({
+                success: false,
+                error: 'API key not found'
+            });
+        }
+
+        res.json({
+            success: true,
+            data: key
+        });
+    } catch (error) {
+        console.error('Error updating API key:', error);
+        res.status(500).json({
+            success: false,
+            error: error.message
+        });
+    }
+});
+
+// DELETE /api/admin/api-keys/:id - Delete API key
+router.delete('/:id', async (req, res) => {
+    try {
+        const deleted = await ApiKey.delete(req.params.id);
+
+        if (!deleted) {
+            return res.status(404).json({
+                success: false,
+                error: 'API key not found'
+            });
+        }
+
+        res.json({
+            success: true,
+            message: 'API key deleted successfully'
+        });
+    } catch (error) {
+        console.error('Error deleting API key:', error);
+        res.status(500).json({
+            success: false,
+            error: error.message
+        });
+    }
+});
+
+module.exports = router;