feat(coderd): filter expired API tokens server-side by kacpersaw · Pull Request #22263 · coder/coder

@kacpersaw

Moves expired token filtering from client-side to server-side by adding
an include_expired parameter to the GetAPIKeysByLoginType and
GetAPIKeysByUserID database queries. This is more efficient for large
deployments with many expired/short-lived tokens.

Changes:
- Add include_expired parameter to SQL queries using OR short-circuit
- Add include_expired query parameter to GET /users/{user}/keys/tokens
- Add IncludeExpired field to codersdk.TokensFilter
- Remove client-side filtering from CLI tokens list command
- Add TestTokensFilterExpired test

Fixes coder/internal#1357
- Fix Go formatting alignment in coderd/apikey.go
- Add include_expired to frontend TokensFilter callers
- Pass include_expired through hooks to API

@kacpersaw

@kacpersaw

johnstcn

@kacpersaw

@kacpersaw

@kacpersaw kacpersaw deleted the kacpersaw/server-side-token-filtering branch

February 24, 2026 15:27