feat(key-auth) support auto-expiring keys

Fixes #87.

kong-1.0.3-0.rockspec

@@ -188,6 +188,7 @@ build = {
     ["kong.plugins.key-auth.migrations"] = "kong/plugins/key-auth/migrations/init.lua",
     ["kong.plugins.key-auth.migrations.000_base_key_auth"] = "kong/plugins/key-auth/migrations/000_base_key_auth.lua",
     ["kong.plugins.key-auth.migrations.001_14_to_15"] = "kong/plugins/key-auth/migrations/001_14_to_15.lua",
+    ["kong.plugins.key-auth.migrations.002_100_to_110"] = "kong/plugins/key-auth/migrations/002_100_to_110.lua",
     ["kong.plugins.key-auth.handler"] = "kong/plugins/key-auth/handler.lua",
     ["kong.plugins.key-auth.schema"] = "kong/plugins/key-auth/schema.lua",
     ["kong.plugins.key-auth.api"] = "kong/plugins/key-auth/api.lua",

kong/plugins/key-auth/daos.lua

@@ -2,6 +2,7 @@ local typedefs = require "kong.db.schema.typedefs"
 
 return {
   keyauth_credentials = {
+    ttl = true,
     primary_key = { "id" },
     name = "keyauth_credentials",
     endpoint_key = "key",

kong/plugins/key-auth/migrations/002_100_to_110.lua

@@ -0,0 +1,15 @@
+return {
+  postgres = {
+    up = [[
+      DO $$
+      BEGIN
+        ALTER TABLE IF EXISTS ONLY "keyauth_credentials" ADD "ttl" TIMESTAMP WITH TIME ZONE;
+      EXCEPTION WHEN DUPLICATE_COLUMN THEN
+        -- Do nothing, accept existing state
+      END$$;
+    ]],
+  },
+  cassandra = {
+    up = [[]],-- nop
+  },
+}

kong/plugins/key-auth/migrations/init.lua

@@ -1,4 +1,5 @@
 return {
   "000_base_key_auth",
   "001_14_to_15",
+  "002_100_to_110",
 }

spec/03-plugins/09-key-auth/01-api_spec.lua

@@ -101,6 +101,31 @@ for _, strategy in helpers.each_strategy() do
 
           assert.not_equal(first_key, json.key)
         end)
+        it("creates a key-auth credential with a ttl", function()
+          local res = assert(admin_client:send {
+            method  = "POST",
+            path    = "/consumers/bob/key-auth",
+            body    = {
+              ttl = 1,
+            },
+            headers = {
+              ["Content-Type"] = "application/json"
+            }
+          })
+          local body = assert.res_status(201, res)
+          local json = cjson.decode(body)
+          assert.equal(consumer.id, json.consumer.id)
+          assert.is_string(json.key)
+
+          ngx.sleep(3)
+
+          local id = json.consumer.id
+          local res = assert(admin_client:send {
+            method  = "GET",
+            path    = "/consumers/bob/key-auth/" .. id,
+          })
+          assert.res_status(404, res)
+        end)
       end)
 
       describe("GET", function()