CTO (LegalAI)
362627981d
feat: implement per-tenant API key management with AES-256-GCM encryption
Add encrypted API key storage for AI providers (Anthropic, OpenAI, Ollama)
with admin-only CRUD endpoints, tenant isolation, and audit logging.
- DB migration: tenant_api_keys table with RLS policy
- AES-256-GCM encryption utility (ENCRYPTION_KEY env var)
- CRUD API: GET/POST /api/settings/api-keys, PATCH/DELETE /api/settings/api-keys/[id]
- Provider integration: getModelForTenant() checks tenant keys before env fallback
- Frontend: API key management section in Einstellungen page
- Audit logging on all key CRUD operations (DSGVO)
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-09 12:08:40 +00:00
..
2026-04-09 12:08:40 +00:00
2026-04-09 00:23:09 +00:00
2026-04-09 08:11:31 +00:00
2026-04-09 12:08:40 +00:00
2026-04-09 10:18:56 +00:00
2026-04-08 21:07:22 +00:00
2026-04-08 23:25:54 +00:00
2026-04-09 00:23:09 +00:00
2026-04-08 21:07:22 +00:00
2026-04-09 12:08:40 +00:00