feat(platform): User API key management

[Abhi1992002]

Feature #8590

Note

This issue depends upon #8589 so merge it first

Adding frontend functionality on the profile page for API key generation and revocation.

Changes 🏗️

• Created requests and types to communicate with the backend.
• Developed frontend functionality to create the API key.

Video

api.ket.generation.mp4

[codiumai-pr-agent-pro]

PR-Agent was enabled for this repository. To continue using it, please link your git user with your CodiumAI identity here.

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🎫 Ticket compliance analysis 🔶 8590 - Fully compliant Fully compliant requirements: Add frontend functionality in profile page for API key generation Add frontend functionality in profile page for API key revocation 8589 - Fully compliant Fully compliant requirements: Create backend function to generate API key Create backend function to store hashed API key

⏱️ Estimated effort to review: 4 🔵🔵🔵🔵⚪

🧪 No relevant tests

🔒 Security concerns API Key Security: The hash_api_key method in key_manager.py does not properly hash the API key, instead generating a random hash unrelated to the input key. This makes it impossible to properly validate API keys. Additionally, sensitive information like API keys and hashes are being logged via print statements, which could expose this data in logs.

⚡ Recommended focus areas for review Security Issue The hash_api_key method generates a new random hash key but doesn't use the input api_key parameter in the hashing process. This means the stored hash has no relation to the original API key. Debug Code Multiple print statements are left in the code which may expose sensitive information like API keys and hashes in logs Debug Code Console.log statement exposing API keys data to browser console

[netlify]

✅ Deploy Preview for auto-gpt-docs canceled.

Name	Link
🔨 Latest commit	1aeeee9
🔍 Latest deploy log	https://app.netlify.com/sites/auto-gpt-docs/deploys/6736bf091497ca0008074bf8

[Torantulino]

Love this! Could be worth explicitly stating it's an AutoGPT platform API key to distinguish it from those in your credentials.

[github-actions]

This pull request has conflicts with the base branch, please resolve those so we can evaluate the pull request.

[aarushik93]

thank you for this, this is great! Minor comments plus Toran's comment and its good to go 🥳

[github-actions]

Conflicts have been resolved! 🎉 A maintainer will review the pull request shortly.

[aarushik93]

I am putting in a feature flag before merging these two PRs

[github-actions]

This pull request has conflicts with the base branch, please resolve those so we can evaluate the pull request.

[github-actions]

Conflicts have been resolved! 🎉 A maintainer will review the pull request shortly.

[github-actions]

This pull request has conflicts with the base branch, please resolve those so we can evaluate the pull request.