remove api-key-org association for root keys

2025-12-13 03:28:19 +00:00 · 2025-08-01 15:55:47 -07:00
parent 6d359b6bb9
commit 7402590f49
11 changed files with 47 additions and 26 deletions
--- a/server/middlewares/integration/verifyApiKeyTargetAccess.ts
+++ b/server/middlewares/integration/verifyApiKeyTargetAccess.ts
@@ -66,6 +66,11 @@ export async function verifyApiKeyTargetAccess(
            );
        }

+        if (apiKey.isRoot) {
+            // Root keys can access any key in any org
+            return next();
+        }
+
        if (!resource.orgId) {
            return next(
                createHttpError(