Graham McIntire 56093bb493 refactor: use API token auth for profile imports instead of session cookies ... Changes profile import endpoint to use standard API token authentication: API Token Changes: - Add user_id to api_tokens table (tracks who created the token) - Update ApiTokens.verify_token/1 to return user along with org_id - Update ApiAuth plug to assign current_user from token Profile Import Changes: - Move endpoint from /api/v1/admin/profiles/import to /api/v1/profiles/import - Check user.is_superuser in controller instead of using RequireSuperuser plug - Use api_v1 pipeline (Bearer token auth) instead of browser session - Update documentation to show API token usage Security: - Only API tokens created by superusers can import profiles - Returns 403 Forbidden if token user is not a superuser - Logs import attempts with user email for audit trail This provides a consistent API experience using Bearer tokens instead of requiring browser session cookies.		2026-01-18 09:30:21 -06:00
..
v1	refactor: use API token auth for profile imports instead of session cookies	2026-01-18 09:30:21 -06:00
mobile_auth_controller.ex	add api for mobile login	2026-01-15 15:36:14 -06:00
mobile_controller.ex	rename equipment to device	2026-01-17 14:48:46 -06:00