API Tokens and Your Webhook Now Live Under Security

What's changed

• Open Security from the account menu, then the API tokens tab, to manage your tokens and your project's webhook. The API tokens entry in the account menu is gone, and the old API tokens address sends you to this tab
• The token list shows the project each token reaches (the project's name, All your projects, or A project you have left, which the API refuses), a summary of its permissions such as Read only, 5 resources, and when it was last used
• Create token asks for a name and a Project access: This project only is the default, and All your projects makes an account-wide token. Existing tokens keep their account-wide access unless you recreate them
• Permissions are a matrix with a row per resource and columns for read, write, delete, credentials and diagnostics, with Defaults, Select all and Clear shortcuts. Creating a token asks you to confirm it's you and shows the token once, so copy it before you close the drawer
• Open a token to see which project it reaches, when it was last used and when it expires, and to change its permissions; Save permissions waits for a change. A token made by danube login holds every permission, so saving a change keeps only what is ticked
• The Webhook card shows the address your events are sent to, its status (Sending events, Paused or Waiting for a secret) and whether a secret signs requests. The first save makes the signing secret and shows it once, and Regenerate secret asks you to confirm it's you