Akibur Rahman
When api key rotation Button is pressed from the UI then a graphql query with this payload is sent.
{
"operationName": "rotateApiKey",
"variables": {
"input": {
"id": "787d5d1b-47e1-4c98-b802-a0c9d6f4e55d",
"expiresAt": "2025-06-17T17:25:32.380Z",
"name": "Security Key"
}
},
"query": "mutation rotateApiKey($input: RotateApiKeyInput!) {\n rotateApiKey(input: $input) {\n id\n ...ApiKeyRevealedForApiKeysList\n __typename\n }\n}\n\nfragment ApiKeyRevealedForApiKeysList on ApiKey {\n id\n value\n __typename\n}"
}
And the response is this:
{
"errors": [
{
"message": "forbidden",
"locations": [
{
"line": 2,
"column": 3
}
],
"path": [
"rotateApiKey"
],
"extensions": {
"status": 403,
"code": "cannot_rotate_with_provided_date"
}
}
],
"data": {
"rotateApiKey": null
}
}
I'm using the Open source version of lago