Auth: accounts, passkeys and API keys

The open Worker authenticates with StaticApiKeys (SHA-256 digests in config). The hosted service needs real accounts.

Sign-in with passkeys (harness auth-passkeys) and an email link fallback.
Issued API keys (gw_live_…), hashed at rest, listed and revoked from the dashboard.
An ApiKeys implementation over that store, supplied through Services (private crate, see the open-core issue).
Account deletion removes the account, keys and the My voice style summary.

Colonizer claim on #2

Colony: ecbedffe
Host: archlinux (f8832acd-9abe-4979-91c9-cf9a08e2ca28)
Status: pull request Add issued API keys (gw_live_) and an AccountStore port to the open core #12 merged
Branch: colonizer/issue-2-ecbedffe
Pull request: Add issued API keys (gw_live_) and an AccountStore port to the open core #12
Updated: 2026-10-10 05:41 UTC

Add issued API keys (gw_live_) and an AccountStore port to the open core

Add issued API keys (gw_live_) and an AccountStore port to the open c…

Navigation Menu