Authz: Remove legacy API Key permissions (#110860)

* remove API key roles

* remove API key gen

* remove frontend and doc mentions

* restore legacy keygen

* restore codeowners

* prettier

* update swagger

* remove permissions including apikeys

* add migrator for removing deprecated permissions

* add tracing

* update openapi3

* simplify migrator for now

* accesscontrol/migrator: remove batching for deprecated permissions deletion

pkg/services/authn/clients/api_key.go

@@ -60,7 +60,7 @@ func (s *APIKey) Authenticate(ctx context.Context, r *authn.Request) (*authn.Ide
 	defer span.End()
 	key, err := s.getAPIKey(ctx, getTokenFromRequest(r))
 	if err != nil {
-		if errors.Is(err, apikeygen.ErrInvalidApiKey) {
+		if errors.Is(err, satokengen.ErrInvalidApiKey) {
 			return nil, errAPIKeyInvalid.Errorf("API key is invalid")
 		}
 		return nil, err
@@ -141,7 +141,7 @@ func (s *APIKey) getFromTokenLegacy(ctx context.Context, token string) (*apikey.
 		return nil, err
 	}
 	if !isValid {
-		return nil, apikeygen.ErrInvalidApiKey
+		return nil, satokengen.ErrInvalidApiKey
 	}
 
 	return key, nil

pkg/services/authn/clients/api_key_test.go

@@ -10,7 +10,6 @@ import (
 	"github.com/stretchr/testify/assert"
 
 	claims "github.com/grafana/authlib/types"
-	"github.com/grafana/grafana/pkg/components/apikeygen"
 	"github.com/grafana/grafana/pkg/components/satokengen"
 	"github.com/grafana/grafana/pkg/infra/tracing"
 	"github.com/grafana/grafana/pkg/services/apikey"
@@ -22,7 +21,7 @@ import (
 
 var (
 	revoked      = true
-	secret, hash = genApiKey(false)
+	secret, hash = genApiKey()
 )
 
 func TestAPIKey_Authenticate(t *testing.T) {
@@ -188,11 +187,7 @@ func boolPtr(b bool) *bool {
 	return &b
 }
 
-func genApiKey(legacy bool) (string, string) {
-	if legacy {
-		res, _ := apikeygen.New(1, "test")
-		return res.ClientSecret, res.HashedKey
-	}
+func genApiKey() (string, string) {
 	res, _ := satokengen.New("test")
 	return res.ClientSecret, res.HashedKey
 }