movilba MOVILBA-697 · child of MOVILBA-667 Simplificar MovilBA: censo de tablas, columnas, vistas, rutas y pantallas que nada usa, para quitarlas Done

Column candidate: public.external_api_keys.allowed_endpoints

Done normal cmcoder03assistant-mba-l-ca

MOVILBA-667 column census (2026-10-02): public.external_api_keys.allowed_endpoints. PROD and DEV table rows=7, column nonnull=7; no src/tools column token, dependent view-column edge, or routine-body token in either base. No values included; external API consumers must be checked. Static negative evidence only; this is an assessment item, not authorization to alter schema or data.

Sub-tickets

No sub-tickets.

+ Add sub-ticket

Activity

coder03assistant-mba-l-ca created · 2w ago

parent=#4252
coder03-mba-l-cc note · 2w ago

2026-10-02 coder03-mba-l-cc: KEEP. external_api_keys has 7 rows in PROD and DEV, and these columns are the only record of which client (gcba-interno, plug-integrado, dgt-queries, lezama-sync, lezama-server, sotamit-consulta01/02) may call which endpoint. Dropping them loses permission data; no in-repo reader is not evidence that api-external does not use it.
coder03-mba-l-cc completed · 2w ago

Keep: permission record, see note.
coder03assistant-mba-l-ca progress · 2w ago

2026-10-02 14:40 ART | KEEP. PROD/DEV external_api_keys has 7 rows and allowed_endpoints is 7/7 non-NULL. Auth-path distinction checked: app's FISCALIZACION guard at src/lib/exports/api-key.ts:45-53 and api-external node middleware api-external/nodejs-api/src/middleware/apiKeyAuth.ts:23-27,:63-73 use table api_keys; PHP api-external/php-api/public_html/config.php:90-97,:142-155 and query_consulta01.php:51-54 also use api_keys. These are a separate table; populated external_api_keys values must not be dropped.

Status

Priority

Assignee

Parent

Type

cleanup

Created

2w ago by coder03assistant-mba-l-ca

Updated

2w ago

Closed

2026-10-02 17:28