feat: add personal access tokens #4637

DBError: insert into "user_access_tokens" ("createdAt", "createdBy", "name", "token", "updatedAt", "userId") values ($1, $2, $3, $4, $5, $6) returning "id" - relation "user_access_tokens" does not exist ❯ wrapError node_modules/.pnpm/db-errors@0.2.3/node_modules/db-errors/lib/dbErrors.js:19:14 ❯ handleExecuteError node_modules/.pnpm/objection@3.1.5_knex@3.2.6_pg@8.20.0_/node_modules/objection/lib/queryBuilder/QueryBuilder.js:1140:32 ❯ QueryBuilder.execute node_modules/.pnpm/objection@3.1.5_knex@3.2.6_pg@8.20.0_/node_modules/objection/lib/queryBuilder/QueryBuilder.js:449:20 ❯ ObjectionAdapter.save apps/backend/src/database/testing/factory.ts:24:19 ❯ Factory.create node_modules/.pnpm/factory-girl-ts@2.3.1/node_modules/factory-girl-ts/src/factory.ts:142:25 ❯ apps/backend/src/auth/request.e2e.test.ts:54:5 ⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯ Serialized Error: { nativeError: { stack: 'error: insert into "user_access_tokens" ("createdAt", "createdBy", "name", "token", "updatedAt", "userId") values ($1, $2, $3, $4, $5, $6) returning "id" - relation "user_access_tokens" does not exist\n at parseErrorMessage (/home/runner/work/argos/argos/node_modules/.pnpm/pg-protocol@1.13.0/node_modules/pg-protocol/dist/parser.js:305:11)\n at Parser.handlePacket (/home/runner/work/argos/argos/node_modules/.pnpm/pg-protocol@1.13.0/node_modules/pg-protocol/dist/parser.js:143:27)\n at Parser.parse (/home/runner/work/argos/argos/node_modules/.pnpm/pg-protocol@1.13.0/node_modules/pg-protocol/dist/parser.js:37:38)\n at Socket.<anonymous> (/home/runner/work/argos/argos/node_modules/.pnpm/pg-protocol@1.13.0/node_modules/pg-protocol/dist/index.js:11:42)\n at Socket.emit (node:events:508:28)\n at addChunk (node:internal/streams/readable:563:12)\n at readableAddChunkPushByteMode (node:internal/streams/readable:514:3)\n at Socket.Readable.push (node:internal/streams/readable:394:5)\n at TCP.onStreamRead (node:internal/stream_base_commons:189:23)', message: 'insert into "user_access_tokens" ("createdAt", "createdBy", "name", "token", "updatedAt", "userId") values ($1, $2, $3, $4, $5, $6) returning "id" - relation "user_access_tokens" does not exist', length: 117, name: 'error', severity: 'ERROR', code: '42P01', detail: undefined, hint: undefined, position: '13', internalPosition: undefined, internalQuery: undefined, where: undefined, schema: undefined, table: undefined, column: undefined, dataType: undefined, constraint: undefined, file: 'parse_relation.c', line: '1449', routine: 'parserOpenTable', constructor: 'Function<DatabaseError>', toString: 'Function<toString>' }, client: 'postgres' }

apps/backend/src/auth/request.e2e.test.ts > getAuthPayloadFromRequest > Personal Access Token authentication > returns null for an expired PAT: apps/backend/src/database/testing/factory.ts#L24

apps/backend/src/auth/request.e2e.test.ts > getAuthPayloadFromRequest > Personal Access Token authentication > returns null for an unknown PAT: apps/backend/src/database/testing/factory.ts#L24

apps/backend/src/auth/request.e2e.test.ts > getAuthPayloadFromRequest > Personal Access Token authentication > updates lastUsedAt when authenticating with a PAT: apps/backend/src/database/testing/factory.ts#L24

apps/backend/src/auth/request.e2e.test.ts > getAuthPayloadFromRequest > Personal Access Token authentication > authenticates with a valid personal access token: apps/backend/src/database/testing/factory.ts#L24

apps/backend/src/auth/request.e2e.test.ts > getAuthPayloadFromRequest > JWT authentication > returns null for an expired or tampered JWT: apps/backend/src/database/testing/factory.ts#L24

apps/backend/src/auth/request.e2e.test.ts > getAuthPayloadFromRequest > JWT authentication > authenticates with a valid JWT: apps/backend/src/database/testing/factory.ts#L24

apps/backend/src/auth/request.e2e.test.ts > getAuthPayloadFromRequest > returns null when token is neither a valid JWT nor a known PAT: apps/backend/src/database/testing/factory.ts#L24

apps/backend/src/auth/request.e2e.test.ts > getAuthPayloadFromRequest > returns null when authorization header is not Bearer: apps/backend/src/database/testing/factory.ts#L24

apps/backend/src/auth/request.e2e.test.ts > getAuthPayloadFromRequest > returns null when no authorization header: apps/backend/src/database/testing/factory.ts#L24

unit-test

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/setup-node@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

static-analysis

e2e-test

integration-test

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: add personal access tokens #4637

Summary

feat: add personal access tokens #4637

Uh oh!

ci.yml

Annotations