API Keys (SSO signin)

[Toylerrr]

I would love to have API keys to auth API usage without having to use SSO or Bearer token.

[Alfagun74]

Yeah, totally. Fuck Bearer Tokens and all that session nonsense for machine-to-machine calls.

Starting from v15 (EA):

1. Flip AUTH_API_KEY_ENABLED to true in your env vars.
2. Register a user the usual Bearer-token way (yeah, just once). Use a username like gvbot_... so it stays out of the lists.
3. Hit /users/me to grab your shiny new api_key.
4. Use that key in the X-Api-Key header for any requests.
5. Boom. You're in ✨