fix(auth): enforce authorization checks across API and Livewire components

- Add authorization checks to API controller endpoints (view, create, update, delete)
- Wrap Livewire component methods with try-catch for consistent error handling
- Add AuthorizesRequests trait to components requiring authorization checks
- Ensure all sensitive operations verify user permissions before execution
- Implement unified error handling with handleError() helper function

app/Livewire/Security/ApiTokens.php

@@ -23,6 +23,8 @@ class ApiTokens extends Component
 
     public bool $canUseWritePermissions = false;
 
+    public bool $canUseDeployPermissions = false;
+
     public function render()
     {
         return view('livewire.security.api-tokens');
@@ -33,6 +35,7 @@ class ApiTokens extends Component
         $this->isApiEnabled = InstanceSettings::get()->is_api_enabled;
         $this->canUseRootPermissions = auth()->user()->can('useRootPermissions', PersonalAccessToken::class);
         $this->canUseWritePermissions = auth()->user()->can('useWritePermissions', PersonalAccessToken::class);
+        $this->canUseDeployPermissions = auth()->user()->can('useDeployPermissions', PersonalAccessToken::class);
         $this->getTokens();
     }
 
@@ -60,6 +63,13 @@ class ApiTokens extends Component
             return;
         }
 
+        if ($permissionToUpdate == 'deploy' && ! $this->canUseDeployPermissions) {
+            $this->dispatch('error', 'You do not have permission to use deploy permissions.');
+            $this->permissions = array_diff($this->permissions, ['deploy']);
+
+            return;
+        }
+
         if ($permissionToUpdate == 'root') {
             $this->permissions = ['root'];
         } elseif ($permissionToUpdate == 'read:sensitive' && ! in_array('read', $this->permissions)) {
@@ -88,6 +98,10 @@ class ApiTokens extends Component
                 throw new \Exception('You do not have permission to create tokens with write permissions.');
             }
 
+            if (in_array('deploy', $this->permissions) && ! $this->canUseDeployPermissions) {
+                throw new \Exception('You do not have permission to create tokens with deploy permissions.');
+            }
+
             $this->validate([
                 'description' => 'required|min:3|max:255',
             ]);