Press n or j to go to the next uncovered block, b, p or k for the previous block.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 | 1x 1x 1x 1x 1x 1x 6x 6x 6x 1x 5x 4x 4x 1x 1x | /**
* List API Keys Lambda
* GET /v1/admin/api-keys
*
* Lists all API keys created by the authenticated user
* Requires JWT authentication
*/
const { DynamoDBClient } = require('@aws-sdk/client-dynamodb')
const { DynamoDBDocumentClient, QueryCommand } = require('@aws-sdk/lib-dynamodb')
const client = new DynamoDBClient({})
const docClient = DynamoDBDocumentClient.from(client)
const API_KEYS_TABLE = process.env.API_KEYS_TABLE
exports.handler = async (event) => {
try {
// Only JWT authentication allowed for admin operations
const userId = event.requestContext?.authorizer?.claims?.sub
if (!userId) {
return {
statusCode: 401,
headers: {
'Content-Type': 'application/json',
'Access-Control-Allow-Origin': '*'
},
body: JSON.stringify({ error: 'Authentication required' })
}
}
// Query API keys by createdBy GSI
const result = await docClient.send(
new QueryCommand({
TableName: API_KEYS_TABLE,
IndexName: 'createdByIndex',
KeyConditionExpression: 'createdBy = :userId',
ExpressionAttributeValues: {
':userId': userId
}
})
)
// Format response (exclude keyHash for security)
const apiKeys = result.Items.map((item) => ({
id: item.id,
name: item.name,
description: item.description || '',
permissions: item.permissions,
allowedEntityIds: item.allowedEntityIds,
status: item.status,
createdAt: item.createdAt,
expiresAt: item.expiresAt || null,
lastUsedAt: item.lastUsedAt || null
}))
return {
statusCode: 200,
headers: {
'Content-Type': 'application/json',
'Access-Control-Allow-Origin': '*'
},
body: JSON.stringify({
apiKeys,
count: apiKeys.length
})
}
} catch (error) {
console.error('Error listing API keys:', error)
return {
statusCode: 500,
headers: {
'Content-Type': 'application/json',
'Access-Control-Allow-Origin': '*'
},
body: JSON.stringify({
error: 'Failed to list API keys',
message: error.message
})
}
}
}
|