🐛 Fix rotate key

DysonNetwork.Pass/Account/BotAccountReceiverGrpc.cs

@@ -169,7 +169,9 @@ public class BotAccountReceiverGrpc(
         var accountId = Guid.Parse(request.AccountId);
         
         var key = await db.ApiKeys
-            .FirstOrDefaultAsync(k => k.Id == keyId && k.AccountId == accountId);
+            .Include(k => k.Session)
+            .Where(k => k.Id == keyId && k.AccountId == accountId)
+            .FirstOrDefaultAsync();
             
         if (key == null)
             throw new RpcException(new Grpc.Core.Status(StatusCode.NotFound, "API key not found"));
@@ -187,7 +189,7 @@ public class BotAccountReceiverGrpc(
     {
         var keyId = Guid.Parse(request.Id);
         var key = await db.ApiKeys
-            .Include(k => k.Account)
+            .Include(k => k.Session)
             .FirstOrDefaultAsync(k => k.Id == keyId);
             
         if (key == null)
@@ -203,7 +205,7 @@ public class BotAccountReceiverGrpc(
     {
         var keyId = Guid.Parse(request.Id);
         var key = await db.ApiKeys
-            .Include(k => k.Account)
+            .Include(k => k.Session)
             .FirstOrDefaultAsync(k => k.Id == keyId);
             
         if (key == null)

DysonNetwork.Pass/Auth/ApiKey.cs

@@ -2,6 +2,7 @@ using System.ComponentModel.DataAnnotations;
 using System.ComponentModel.DataAnnotations.Schema;
 using System.Text.Json.Serialization;
 using DysonNetwork.Shared.Data;
+using NodaTime.Serialization.Protobuf;
 
 namespace DysonNetwork.Pass.Auth;
 
@@ -27,7 +28,9 @@ public class ApiKey : ModelBase
             Label = Label,
             AccountId = AccountId.ToString(),
             SessionId = SessionId.ToString(),
-            Key = Key
+            Key = Key,
+            CreatedAt = CreatedAt.ToTimestamp(),
+            UpdatedAt = UpdatedAt.ToTimestamp()
         };
     }
 
@@ -39,7 +42,9 @@ public class ApiKey : ModelBase
             AccountId = Guid.Parse(proto.AccountId),
             SessionId = Guid.Parse(proto.SessionId),
             Label = proto.Label,
-            Key = proto.Key
+            Key = proto.Key,
+            CreatedAt = proto.CreatedAt.ToInstant(),
+            UpdatedAt = proto.UpdatedAt.ToInstant()
         };
     }
 }

DysonNetwork.Pass/Auth/AuthService.cs

@@ -365,17 +365,39 @@ public class AuthService(
 
     public async Task<ApiKey> RotateApiKeyToken(ApiKey key)
     {
-        var originalSession = key.Session;
-        db.Remove(originalSession);
-        key.Session = new AuthSession
+        await using var transaction = await db.Database.BeginTransactionAsync();
+        try
+        {
+            var oldSessionId = key.SessionId;
+
+            // Create new session
+            var newSession = new AuthSession
             {
                 AccountId = key.AccountId,
-            ExpiredAt = originalSession.ExpiredAt
+                ExpiredAt = key.Session?.ExpiredAt
             };
-        db.Add(key.Session);
+
+            db.AuthSessions.Add(newSession);
             await db.SaveChangesAsync();
+
+            // Update ApiKey to point to new session
+            key.SessionId = newSession.Id;
+            key.Session = newSession;
+            db.ApiKeys.Update(key);
+            await db.SaveChangesAsync();
+
+            // Delete old session
+            await db.AuthSessions.Where(s => s.Id == oldSessionId).ExecuteDeleteAsync();
+
+            await transaction.CommitAsync();
             return key;
         }
+        catch
+        {
+            await transaction.RollbackAsync();
+            throw;
+        }
+    }
 
     // Helper methods for Base64Url encoding/decoding
     private static string Base64UrlEncode(byte[] data)

DysonNetwork.Shared/Data/Account.cs

@@ -328,7 +328,9 @@ public class ApiKeyReference : ModelBase
             Label = Label,
             AccountId = AccountId.ToString(),
             SessionId = SessionId.ToString(),
-            Key = Key
+            Key = Key,
+            CreatedAt = CreatedAt.ToTimestamp(),
+            UpdatedAt = UpdatedAt.ToTimestamp()
         };
     }
 
@@ -340,7 +342,9 @@ public class ApiKeyReference : ModelBase
             AccountId = Guid.Parse(proto.AccountId),
             SessionId = Guid.Parse(proto.SessionId),
             Label = proto.Label,
-            Key = proto.Key
+            Key = proto.Key,
+            CreatedAt = proto.CreatedAt.ToInstant(),
+            UpdatedAt = proto.UpdatedAt.ToInstant()
         };
     }
 }

DysonNetwork.Shared/Proto/develop.proto

@@ -143,6 +143,8 @@ message ApiKey {
   string account_id = 3;
   string session_id = 4;
   google.protobuf.StringValue key = 5;
+  google.protobuf.Timestamp created_at = 6;
+  google.protobuf.Timestamp updated_at = 7;
 }
 
 message GetApiKeyRequest {