Add API key authentication (no user model)

Tinker

Home Epics Add API key authentication (no user model)Edit

Cancel

Title *

Project *

Description

## Task

Add simple API key-based authentication to the application.

## Requirements

- **No user model** - do NOT use Devise (it's email/password focused with registration, etc.)
- Single API key input for authentication
- Can use gems like Warden or other lightweight authentication solutions
- No registration, password reset, or other user management features needed

## Implementation

Use the existing `api_key` field on the `Agent` model for authentication.

Consider approaches using:
1. **Warden** - Lightweight authentication middleware, highly customizable
2. **Custom solution with Rails session** - Simple controller-based authentication
3. Other lightweight auth gems that support custom strategies

## What to Build

1. **Login screen** - Single input field for API key
2. **Authentication logic** - Validate the API key against Agent.api_key and create a session
3. **Protected routes** - Ensure main app routes require authentication
4. **Logout functionality** - Clear the session

## Notes

- Keep it simple - we don't need user accounts, roles, or permissions
- Warden is a good choice as it provides auth primitives without Devise's user-focused features
- Any agent's API key can be used to log in