migrate GoDaddy auth → Bearer PAT (TK-10 key rotation); sso-key fallback retained

ff46840a755fed7fd095d7bce71858c665669e86 · 2026-07-27 20:04:04 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Files touched

M server.mjs

Diff

commit ff46840a755fed7fd095d7bce71858c665669e86
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Jul 27 20:04:04 2026 -0700

    migrate GoDaddy auth → Bearer PAT (TK-10 key rotation); sso-key fallback retained
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 server.mjs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.mjs b/server.mjs
index 188b7cb..893b83f 100644
--- a/server.mjs
+++ b/server.mjs
@@ -155,7 +155,7 @@ function catalog() {
   key({ key: 'moonshot', name: 'Moonshot (Kimi)', tag: last4(s.MOONSHOT_API_KEY), fixUrl: 'https://platform.moonshot.ai/console/api-keys', instructions: 'Rotate the key in the Moonshot console.', envName: 'MOONSHOT_API_KEY',
     probe: () => probeURL(s.MOONSHOT_API_KEY, 'https://api.moonshot.ai/v1/models', { Authorization: 'Bearer ' + s.MOONSHOT_API_KEY }) });
   key({ key: 'godaddy', name: 'GoDaddy', tag: last4(s.GODADDY_API_KEY), fixUrl: 'https://developer.godaddy.com/keys', instructions: 'Create a production key at developer.godaddy.com/keys (OTE keys 403 on prod).', envName: 'GODADDY_API_KEY',
-    probe: async () => { const k = s.GODADDY_API_KEY, sec = s.GODADDY_API_SECRET; if (!k || !sec) return MISSING(); try { const r = await fetchT('https://api.godaddy.com/v1/domains?limit=1', { headers: { Authorization: 'sso-key ' + k + ':' + sec } }); return r.ok ? OK() : DEAD('http ' + r.status); } catch (e) { return UNKNOWN(e.message); } } });
+    probe: async () => { const k = s.GODADDY_API_KEY, sec = s.GODADDY_API_SECRET, pat = s.GODADDY_PAT; if (!pat && (!k || !sec)) return MISSING(); const GD_AUTH = pat ? 'Bearer ' + pat : 'sso-key ' + k + ':' + sec; try { const r = await fetchT('https://api.godaddy.com/v1/domains?limit=1', { headers: { Authorization: GD_AUTH } }); return r.ok ? OK() : DEAD('http ' + r.status); } catch (e) { return UNKNOWN(e.message); } } });
 
   return items;
 }

← 9d9e6d4 auto-save: 2026-07-07T08:56:34 (1 files) — package-lock.json · back to Api Token Dashboard · (newest)