WIP: feat(tokens): Preferences section "Access tokens" (phase 6d, draft until #1162 RC) #25

Draft

KofTwentyTwo wants to merge 1 commits from feature/token-preferences into develop

pull from: feature/token-preferences

Author	SHA1	Message	Date
james.maesandClaude Opus 5.5	d91b81499f	feat(tokens): Preferences section "Access tokens" (DESIGN.md section 13, phase 6d) Self-service through the core Preferences contract (QRun-IO/qqq#1162): section access-tokens, shown in the user menu, lists the signed-in user's own app passwords (metadata only) with Create token (section), Rotate, Extend and Revoke (row) actions. Each action runs through AuthentikAdmin, so the guardrails, the broker exchange as the user and the audit apply exactly as for the record actions. The key is returned once as a core OneTimeSecret with usage text and is never stored. STAND-IN(core=QRun-IO/qqq#1162, removeBy=4.1.0-RC.7): builds against 4.1.0-PREFS-SNAPSHOT until an RC ships #1162 (draft until then). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-13 22:10:53 -05:00

Author

SHA1

Message

Date

james.maesandClaude Opus 5.5

d91b81499f

feat(tokens): Preferences section "Access tokens" (DESIGN.md section 13, phase 6d)

Self-service through the core Preferences contract (QRun-IO/qqq#1162):
section access-tokens, shown in the user menu, lists the signed-in
user's own app passwords (metadata only) with Create token (section),
Rotate, Extend and Revoke (row) actions. Each action runs through
AuthentikAdmin, so the guardrails, the broker exchange as the user and
the audit apply exactly as for the record actions. The key is returned
once as a core OneTimeSecret with usage text and is never stored.

STAND-IN(core=QRun-IO/qqq#1162, removeBy=4.1.0-RC.7): builds against
4.1.0-PREFS-SNAPSHOT until an RC ships #1162 (draft until then).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-13 22:10:53 -05:00