feat: add portal api key management

apps/portal/views.py

@@ -1,7 +1,17 @@
+from django.contrib import messages
 from django.contrib.auth.mixins import LoginRequiredMixin
-from django.views.generic import TemplateView
+from django.shortcuts import get_object_or_404, redirect
+from django.urls import reverse_lazy
+from django.views import View
+from django.views.generic import FormView, TemplateView
 
 from apps.billing.services import get_balance_snapshot
+from apps.users.models import ApiKey
+
+from .forms import ApiKeyCreateForm
+
+
+NEW_API_KEY_SESSION_KEY = "portal_new_api_key"
 
 
 class DashboardView(LoginRequiredMixin, TemplateView):
@@ -11,3 +21,39 @@ class DashboardView(LoginRequiredMixin, TemplateView):
         context = super().get_context_data(**kwargs)
         context["balance"] = get_balance_snapshot(self.request.user)
         return context
+
+
+class ApiKeyListCreateView(LoginRequiredMixin, FormView):
+    template_name = "portal/apikeys.html"
+    form_class = ApiKeyCreateForm
+    success_url = reverse_lazy("portal-apikeys")
+
+    def get_context_data(self, **kwargs):
+        context = super().get_context_data(**kwargs)
+        context["api_keys"] = ApiKey.objects.filter(user=self.request.user).order_by(
+            "-created_at",
+            "-id",
+        )
+        context["new_api_key"] = self.request.session.pop(NEW_API_KEY_SESSION_KEY, None)
+        return context
+
+    def form_valid(self, form):
+        name = form.cleaned_data["name"].strip()
+        api_key, raw_key = ApiKey.create_for_user(self.request.user, name=name)
+        self.request.session[NEW_API_KEY_SESSION_KEY] = {
+            "name": api_key.name,
+            "key_prefix": api_key.key_prefix,
+            "raw_key": raw_key,
+        }
+        messages.success(self.request, "API Key 已生成")
+        return super().form_valid(form)
+
+
+class ApiKeyDeleteView(LoginRequiredMixin, View):
+    def post(self, request, pk):
+        api_key = get_object_or_404(ApiKey, pk=pk, user=request.user)
+        if api_key.status != ApiKey.Status.REVOKED:
+            api_key.status = ApiKey.Status.REVOKED
+            api_key.save(update_fields=("status", "updated_at"))
+            messages.success(request, "API Key 已删除")
+        return redirect("portal-apikeys")