-
Description: {{ $token->name }}
-
Last used: {{ $token->last_used_at ? $token->last_used_at->diffForHumans() : 'Never' }}
-
- @if ($token->abilities)
- Permissions:
- @foreach ($token->abilities as $ability)
-
{{ $ability }}
- @endforeach
- @endif
+
+
+
+
+
+
+
+
+ | Description |
+ Permissions |
+ Last used |
+ Created |
+ Expires |
+ Actions |
+
+
+
+ @forelse ($tokens as $token)
+
+ | {{ $token->name }} |
+
+ @if ($token->abilities)
+
+ @foreach ($token->abilities as $ability)
+ {{ $ability }}
+ @endforeach
+ |
+
+ {{ $token->last_used_at ? $token->last_used_at->diffForHumans() : 'Never' }}
+ |
+
+ {{ $token->created_at->diffForHumans() }}
+ |
+
+ @if (! $token->expires_at)
+ Never
+ @elseif ($token->expires_at->isPast())
+ Expired
+ {{ $token->expires_at->format('Y-m-d H:i:s') }}
+ @else
+ {{ $token->expires_at->format('Y-m-d H:i:s') }}
+ @endif
+ |
+
+ @if (auth()->id() === $token->tokenable_id)
+
+ @endif
+ |
+
+ @empty
+
+ | No API tokens found.
+ |
+
+ @endforelse
+
+
+
-
- @if (auth()->id() === $token->tokenable_id)
-
- @endif
- @empty
-
- @endforelse
+
@endif
diff --git a/tests/Feature/ApiTokenExpirationTest.php b/tests/Feature/ApiTokenExpirationTest.php
new file mode 100644
index 000000000..99a952848
--- /dev/null
+++ b/tests/Feature/ApiTokenExpirationTest.php
@@ -0,0 +1,81 @@
+team = Team::factory()->create();
+ $this->user = User::factory()->create();
+ $this->team->members()->attach($this->user->id, ['role' => 'owner']);
+
+ session(['currentTeam' => $this->team]);
+ $this->actingAs($this->user);
+});
+
+describe('token creation with expiration', function () {
+ test('livewire component stores expires_at when expiresInDays set', function () {
+ Livewire::test(ApiTokens::class)
+ ->set('description', 'test-token')
+ ->set('expiresInDays', 7)
+ ->set('permissions', ['read'])
+ ->call('addNewToken')
+ ->assertHasNoErrors();
+
+ $token = $this->user->tokens()->latest()->first();
+
+ expect($token)->not->toBeNull()
+ ->and($token->expires_at)->not->toBeNull()
+ ->and($token->expires_at->diffInDays(now()))->toBeGreaterThanOrEqual(6)
+ ->and($token->expires_at->diffInDays(now()))->toBeLessThanOrEqual(7);
+ });
+
+ test('livewire component stores null expires_at when expiresInDays null (Never)', function () {
+ Livewire::test(ApiTokens::class)
+ ->set('description', 'never-token')
+ ->set('expiresInDays', null)
+ ->set('permissions', ['read'])
+ ->call('addNewToken')
+ ->assertHasNoErrors();
+
+ $token = $this->user->tokens()->latest()->first();
+
+ expect($token)->not->toBeNull()
+ ->and($token->expires_at)->toBeNull();
+ });
+
+ test('livewire component rejects invalid expiresInDays value', function () {
+ Livewire::test(ApiTokens::class)
+ ->set('description', 'bad-token')
+ ->set('expiresInDays', 42)
+ ->set('permissions', ['read'])
+ ->call('addNewToken')
+ ->assertHasErrors('expiresInDays');
+ });
+});
+
+describe('expired token rejected on API', function () {
+ test('request with expired token returns 401', function () {
+ $token = $this->user->createToken('expired', ['read'], now()->subDay());
+
+ $response = $this->withHeaders([
+ 'Authorization' => 'Bearer '.$token->plainTextToken,
+ ])->getJson('/api/v1/projects');
+
+ $response->assertStatus(401);
+ });
+
+ test('request with non-expired token works', function () {
+ $token = $this->user->createToken('valid', ['read'], now()->addDay());
+
+ $response = $this->withHeaders([
+ 'Authorization' => 'Bearer '.$token->plainTextToken,
+ ])->getJson('/api/v1/projects');
+
+ $response->assertStatus(200);
+ });
+});
diff --git a/tests/Feature/ApiTokenExpirationWarningTest.php b/tests/Feature/ApiTokenExpirationWarningTest.php
new file mode 100644
index 000000000..5255581dd
--- /dev/null
+++ b/tests/Feature/ApiTokenExpirationWarningTest.php
@@ -0,0 +1,83 @@
+team = Team::factory()->create();
+ $this->user = User::factory()->create();
+ $this->team->members()->attach($this->user->id, ['role' => 'owner']);
+ $this->team->emailNotificationSettings()->update(['use_instance_email_settings' => true]);
+ $this->team->discordNotificationSettings()->update([
+ 'discord_enabled' => true,
+ 'discord_webhook_url' => 'https://discord.com/api/webhooks/fake/fake',
+ ]);
+
+ session(['currentTeam' => $this->team]);
+ $this->actingAs($this->user);
+
+ Cache::flush();
+ Notification::fake();
+});
+
+function createTokenExpiring(User $user, Team $team, ?Carbon $expiresAt): PersonalAccessToken
+{
+ $plain = $user->createToken('t-'.uniqid(), ['read'], $expiresAt);
+ $token = $plain->accessToken;
+ $token->team_id = $team->id;
+ $token->save();
+
+ return $token->fresh();
+}
+
+describe('ApiTokenExpirationWarningJob', function () {
+ test('notifies team when token expires within 24h', function () {
+ createTokenExpiring($this->user, $this->team, now()->addHours(23));
+
+ (new ApiTokenExpirationWarningJob)->handle();
+
+ Notification::assertSentTo($this->team, ApiTokenExpiringNotification::class);
+ });
+
+ test('rate limiter prevents duplicate warnings on repeat runs', function () {
+ createTokenExpiring($this->user, $this->team, now()->addHours(12));
+
+ (new ApiTokenExpirationWarningJob)->handle();
+ (new ApiTokenExpirationWarningJob)->handle();
+
+ Notification::assertSentToTimes($this->team, ApiTokenExpiringNotification::class, 1);
+ });
+
+ test('skips tokens expiring more than 24h out', function () {
+ createTokenExpiring($this->user, $this->team, now()->addDays(3));
+
+ (new ApiTokenExpirationWarningJob)->handle();
+
+ Notification::assertNothingSent();
+ });
+
+ test('skips already-expired tokens', function () {
+ createTokenExpiring($this->user, $this->team, now()->subHour());
+
+ (new ApiTokenExpirationWarningJob)->handle();
+
+ Notification::assertNothingSent();
+ });
+
+ test('skips tokens with null expires_at', function () {
+ createTokenExpiring($this->user, $this->team, null);
+
+ (new ApiTokenExpirationWarningJob)->handle();
+
+ Notification::assertNothingSent();
+ });
+});