remove api-key-org association for root keys

2025-12-12 19:18:30 +00:00 · 2025-08-01 15:55:47 -07:00
parent 6d359b6bb9
commit 7402590f49
11 changed files with 47 additions and 26 deletions
--- a/server/middlewares/integration/verifyApiKeyOrgAccess.ts
+++ b/server/middlewares/integration/verifyApiKeyOrgAccess.ts
@@ -27,6 +27,11 @@ export async function verifyApiKeyOrgAccess(
            );
        }

+        if (req.apiKey?.isRoot) {
+            // Root keys can access any key in any org
+            return next();
+        }
+
        if (!req.apiKeyOrg) {
            const apiKeyOrgRes = await db
                .select()