Replace in-memory auth, sessions, temp tokens, and rate limits with durable production storage

[ishaanxgupta]

We keeps critical control-plane state in process memory across dependencies.py, auth.py, api_key_store.py, and admin.py. This breaks multi-instance deployments.

Acceptance criteria:

• API keys have scopes, expiry, org/project binding, and durable validation.
• Rate limits use Redis/Mongo or another shared backend.
• OAuth temp tokens/auth codes are durable and TTL-backed.
• Production mode refuses in-memory fallback.

Bounty 20$ API Credits

[arbazkhan971]

/attempt #161

Working on durable control-plane state storage with a shared Mongo-backed store for temp tokens, OAuth codes, admin sessions, rate limiting, and production fail-fast behavior.

[jynbil1]

Submitted PR #179 for this bounty: #179

Scope: durable control-plane store for OAuth/MCP temp tokens, admin sessions, shared rate limits, API key scopes/expiry/org-project bindings, and production fail-fast storage guards.

/claim #161

[laolaoqi]

Bid: Replace in-memory auth with durable production storage

What I'll deliver:

• Migrate API key validation from in-memory dicts to Redis/Mongo with scopes, expiry, org/project binding
• Durable OAuth temp tokens/auth codes with TTL-backed storage
• Replace in-memory rate limiter with shared backend (Redis sliding window)
• Production mode guard that refuses in-memory fallback
• Keep backward compat with existing auth flows; add env toggle for storage backend

Timeline: 5-7 days from assignment

Why me: Experienced Python backend engineer. Built auth systems handling 10K+ RPS with Redis-backed sessions and rate limiting. Proficient with FastAPI/Starlette middleware, JWT/OAuth2 flows, and async Redis drivers.

Payment address: 0x6c21794E27C34E93cd0049918d04Da58FC72595c (ERC-20/USDC preferred)