remove api-key-org association for root keys

2026-02-25 22:36:38 +00:00 · 2025-08-01 15:55:47 -07:00
parent 6d359b6bb9
commit 7402590f49
11 changed files with 47 additions and 26 deletions
--- a/server/middlewares/integration/verifyApiKeyUserAccess.ts
+++ b/server/middlewares/integration/verifyApiKeyUserAccess.ts
@@ -27,6 +27,11 @@ export async function verifyApiKeyUserAccess(
            );
        }

+        if (apiKey.isRoot) {
+            // Root keys can access any key in any org
+            return next();
+        }
+
        if (!req.apiKeyOrg || !req.apiKeyOrg.orgId) {
            return next(
                createHttpError(