代理用户身份
每个 API 密钥绑定一个用户。有效权限 = 用户角色权限 ∩ 授予的作用域,与 GitHub PAT、Stripe Restricted Keys 同款模型。
创建密钥(浏览器会话,JWT 认证):
curl -X POST https://<host>/api/auth/api-keys \
-H "Authorization: Bearer <jwt>" \
-H "Content-Type: application/json" \
-d '{"name":"ingest-worker","scopes":["picture:upload"]}'用返回的 plaintext(只返回这一次)调上传:
curl -N -X POST https://<host>/api/picture/upload/batch/selected \
-H "Authorization: Bearer iph_live_..." \
-H "Content-Type: application/json" \
-d '{"urlList":["https://..."],"namePrefix":"cc0-","tags":["cc0"]}'完整规范见 API 参考。