Initial commit

yksa_kit/admin.py

@@ -0,0 +1,25 @@
+from __future__ import annotations
+
+from django.contrib import admin
+
+from .models import ApiToken
+
+
+@admin.register(ApiToken)
+class ApiTokenAdmin(admin.ModelAdmin):
+    list_display = ("name", "kind", "is_active", "created_at", "last_used_at")
+    list_filter = ("kind", "is_active")
+    search_fields = ("name", "notes")
+    readonly_fields = ("token", "created_at", "last_used_at")
+    fieldsets = (
+        (None, {"fields": ("name", "kind", "is_active", "notes")}),
+        ("Credential", {"fields": ("token",)}),
+        ("Audit", {"fields": ("created_at", "last_used_at")}),
+    )
+
+    def get_readonly_fields(self, request, obj=None):
+        # Hide the generated token on create, reveal it on edit: it is the only
+        # place an operator can ever read it back.
+        if obj is None:
+            return ("created_at", "last_used_at")
+        return self.readonly_fields