anyproto / anyproto/anytype-api
AnyType API works after revoking API key
Open
Nobody has claimed this yet.
bug
- Dominant language
- JavaScript
- Stars
- 113
- Forks
- 20
- Avg merge
- 16m
- Merged PRs (30d)
- 1
Description
Have you read a contributing guide?
- I have read CONTRIBUTING.md
- I have searched the existing issues and didn't find any that were similar
- I have considered creating a pull request with fixes instead of a bug report and want to proceed
Current Behavior
If I revoke API Key I still can grab any data with this key before I reload my AnyType Application.
Expected Behavior
If I revoke API key it should be not usable at once.
Steps To Reproduce
- Create API Key
- Do some API requests -> successful
- Revoke API key
- Do some API requests -> Also successful but shouldn't
Environment
OS version: darwin arm64 15.6.0
App version: 0.48.5
Build number: build on 2025-08-14 14:26:54 +0000 UTC at #349da9ee9b99abcc6566b66c746d8d80b74e9870
Library version: v0.42.4
Anything else?
https://github.com/user-attachments/assets/93af2fcb-3e4b-41c1-88e0-a1062d7084c6
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the API-key requests before and after revocation using the environment details in the issue. Trace the API-key revocation and request-validation path; done means requests using a revoked key fail immediately without reloading the Anytype application, with regression coverage for this sequence.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- openapi
- Domain
- api, authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100