Semih Yesilyurt 7a4fe51d09 feat(api): public API POC — API-key auth + /api/v1 decode & OEM xref ...

Kapalı-beta public API temeli (rapor: api-widget-analizi-2026-07-03):
- better-auth apiKey plugin (defaultPrefix sase_, enableMetadata, anahtar
  başına 120 istek/dk); enableSessionForAPIKeys KAPALI — anahtar dashboard
  oturumu yerine geçmez, cookie AuthGuard davranışı değişmez
- apikeys tablosu (migration 0023, plugin şemasının birebir karşılığı)
- ApiKeyGuard: Authorization Bearer / x-api-key → verifyApiKey → kullanıcı
  yüklenir (status kontrolü), request.user + request.apiKey doldurulur
- /api/v1/vin/decode: mevcut slim kontrat + aday akışı; günlük başarılı-decode
  kotası (Redis, TR günü, aynı VIN idempotent; limit: key metadata
  dailyDecodeLimit → PUBLIC_API_DAILY_DECODE_LIMIT → 100) ve
  X-Decode-Quota-* header'ları
- /api/v1/oem/:code: P çapraz-referans (kotasız)
- internal/admin/api-keys: x-internal-token ile anahtar üret/listele/kapat
  (düz metin yalnız create cevabında)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-03 16:15:17 +03:00

..

meta

feat(api): public API POC — API-key auth + /api/v1 decode & OEM xref

2026-07-03 16:15:17 +03:00

0000_brief_guardian.sql

feat(FN-193): rewrite migrate.ts with hash-based runner (+4 more)

2026-05-12 07:22:51 +00:00

0001_charming_quicksand.sql

feat(FN-192): DB schema + Migration (+7 more)

2026-05-12 06:13:34 +00:00

0002_boring_the_stranger.sql

fix(migrate): make 0002 timings column add idempotent

2026-05-12 11:35:05 +00:00

0003_query_log_insights.sql

feat(analytics): enrich query_logs metadata + query_log_insights view

2026-05-12 12:04:23 +00:00

0004_hot_quicksilver.sql

feat: replace Iyzico with Stripe + single-page subscription stepper

2026-05-13 22:42:28 +00:00

0005_past_elektra.sql

feat(internal-admin): readonly impersonation for Süper Panel

2026-05-18 00:48:39 +03:00

0006_chilly_dark_phoenix.sql

feat(internal-admin): user lifecycle — suspend / reactivate / ban

2026-05-18 09:34:52 +03:00

0007_natural_red_wolf.sql

fix(catalog): pcat parent groups no longer show empty "0 parça"

2026-05-24 01:02:00 +03:00

0008_common_sumo.sql

feat(blog): drizzle migration 0008 — blog_posts table

2026-05-24 17:40:10 +03:00

0009_referral_rewards_rework.sql

feat(referrals): rework reward engine + email-verified landing

2026-05-25 13:28:32 +03:00

0010_dedupe_parts.sql

fix(parts): dedupe ingest path + clean ~108k duplicate rows

2026-06-02 02:08:57 +03:00

0011_email_preferences.sql

feat(notifications): TR-only templates + name canonicalisation + MTA-STS + 2048-bit DKIM + unsubscribe (audit §9.3)

2026-06-04 14:28:39 +03:00

0012_lifecycle_email_sent.sql

feat(notifications): operability tier — send_limit + open-pixel + signed-URL exp + retention + sent-flag (audit §9.4)

2026-06-04 17:04:17 +03:00

0013_fix_brand_casing.sql

fix(vehicles): canonicalise brand casing (case-insensitive brand match)

2026-06-09 23:47:33 +03:00

0014_proxy_logs.sql

feat(proxy): proxy_logs telemetry — per-attempt provider/ban/latency tracking

2026-06-11 17:27:48 +03:00

0015_oem_votes.sql

feat(catalog): OEM uyumluluk oylaması + Parça Uzmanları liderlik tablosu

2026-06-12 00:00:51 +03:00

0016_oem_suggestions.sql

feat(catalog): OEM oyları detay sayfasına taşındı + topluluk muadil önerileri

2026-06-12 00:26:20 +03:00

0017_oem_expert_rewards.sql

feat(gamification): aylık uzman sezonları — ilk 3'e otomatik üyelik uzatması

2026-06-12 10:48:36 +03:00

0018_part_price_history.sql

feat(part-prices): parça kodu bazlı tedarikçi fiyat geçmişi + OEM sayfasında p50/p95/p99 grafiği

2026-06-12 13:33:37 +03:00

0019_part_price_brand.sql

fix(part-prices): fiyat kimliği marka+kod oldu — kısa kodlarda marka karışması giderildi

2026-06-12 14:55:44 +03:00

0020_stripe_recurring.sql

feat(payments): recurring billing — Stripe Checkout switches to subscription mode

2026-06-12 15:55:44 +03:00

0021_vinpin_decodes.sql

feat(vehicles): automatic Vinpin VIN-decode fallback (flag-gated, off by default)

2026-06-26 07:36:39 +03:00

0022_discount_codes.sql

feat(billing): indirim kodu sistemi (admin panel + Stripe promo + ödeme)

2026-06-29 03:40:18 +03:00

0023_api_keys.sql

feat(api): public API POC — API-key auth + /api/v1 decode & OEM xref

2026-07-03 16:15:17 +03:00