WIP

src/api/MicCheck.Api/ApiKeys/ApiKeyEndpoints.cs

@@ -0,0 +1,46 @@
+using MicCheck.Api.Authorization;
+
+namespace MicCheck.Api.ApiKeys;
+
+public static class ApiKeyEndpoints
+{
+    public static void MapApiKeyEndpoints(this WebApplication app)
+    {
+        var group = app
+            .MapGroup("/api/v1/organisations/{organizationId:int}/api-keys")
+            .RequireAuthorization(AuthorizationPolicies.OrganizationAdmin)
+            .WithTags("ApiKeys");
+
+        group.MapPost("/", async (
+            int organizationId,
+            CreateApiKeyRequest request,
+            ApiKeyService apiKeyService,
+            CancellationToken ct) =>
+        {
+            var (key, rawKey) = await apiKeyService.CreateAsync(
+                organizationId, request.Name, request.ExpiresAt, ct);
+
+            return Results.Ok(new CreateApiKeyResponse(key.Id, key.Name, rawKey, key.Prefix, key.ExpiresAt));
+        }).WithName("CreateApiKey");
+
+        group.MapGet("/", async (
+            int organizationId,
+            ApiKeyService apiKeyService,
+            CancellationToken ct) =>
+        {
+            var keys = await apiKeyService.ListAsync(organizationId, ct);
+            return Results.Ok(keys.Select(k =>
+                new ApiKeyResponse(k.Id, k.Name, k.Prefix, k.IsActive, k.ExpiresAt, k.CreatedAt)));
+        }).WithName("ListApiKeys");
+
+        group.MapDelete("/{keyId:int}", async (
+            int organizationId,
+            int keyId,
+            ApiKeyService apiKeyService,
+            CancellationToken ct) =>
+        {
+            await apiKeyService.RevokeAsync(organizationId, keyId, ct);
+            return Results.NoContent();
+        }).WithName("RevokeApiKey");
+    }
+}