feat: Add created_by to MasterAPIKey model

[matthewelwell]

Changes

Add 'created by' to Organisation API keys for better auditing.

How did you test this code?

Updated existing unit test and tested frontend changes locally.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
flagsmith-frontend-preview	Ready	Preview, Comment	Mar 4, 2026 9:26pm
flagsmith-frontend-staging	Ready	Preview, Comment	Mar 4, 2026 9:26pm

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Ignored	Preview	Mar 4, 2026 9:26pm

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.33%. Comparing base (877c321) to head (6f2f9ec).
⚠️ Report is 10 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #6845   +/-   ##
=======================================
  Coverage   98.33%   98.33%           
=======================================
  Files        1336     1337    +1     
  Lines       49615    49628   +13     
=======================================
+ Hits        48790    48803   +13     
  Misses        825      825           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

Docker builds report

Image	Build Status	Security report
ghcr.io/flagsmith/flagsmith-e2e:pr-6845	Finished ✅	Skipped
ghcr.io/flagsmith/flagsmith-api-test:pr-6845	Finished ✅	Skipped
ghcr.io/flagsmith/flagsmith-api:pr-6845	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith:pr-6845	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith-private-cloud:pr-6845	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith-frontend:pr-6845	Finished ✅	Results ✅

[github-actions]

Playwright Test Results (oss - depot-ubuntu-latest-16)

 10 passed

Details

 10 tests across 7 suites
 24 seconds
 6f2f9ec
 🔄 Run: #15125 (attempt 1)

[github-actions]

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

 10 passed

Details

 10 tests across 7 suites
 49.3 seconds
 6f2f9ec
 🔄 Run: #15125 (attempt 1)

[github-actions]

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

 16 passed

Details

 16 tests across 13 suites
 1 minute, 5 seconds
 6f2f9ec
 🔄 Run: #15125 (attempt 1)

[github-actions]

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

 2 passed

Details

 2 tests across 2 suites
 45.7 seconds
 6f2f9ec
 🔄 Run: #15125 (attempt 1)

[Zaimwa9]

Code looks good and safe to me, haven't tested it yet, will do but approving to not block

[Zaimwa9]

Sorry, old store pattern required to get the users.

NIT: Columns are slightly misaligned

[Zaimwa9]

Actually the organisation store is empty on this page. It needs to be dispatched the old way (hello ClassComponents).

You'll need something like this otherwise organisationStore.model?.users is empty and fallbacks on -

import AppActions from 'common/dispatcher/app-actions'

  componentDidMount() {
    this.fetch()
    AppActions.getOrganisation(this.props.organisationId)
    OrganisationStore.on('change', this.handleOrgStoreChange)
  }

  componentDidUpdate() {
    if (this.props.organisationId === this.state.organisationId) return

    this.fetch()
    AppActions.getOrganisation(this.props.organisationId)
    this.setState({ organisationId: this.props.organisationId })
  }

  componentWillUnmount() {
    OrganisationStore.off('change', this.handleOrgStoreChange)
  }

  handleOrgStoreChange = () => {
    this.forceUpdate()
  }

[matthewelwell]

I'm a bit confused by this comment for a couple of reasons:

1. The comment is attached to a line related to the flagsmith SDK, and determining if the flag is enabled or not.
2. If the organisation store was empty, wouldn't we not see any names populated in the list? Doesn't your screenshot prove that's not the case?

I'm sure there's something I'm missing here, but I'd like to understand a little more about what the issue is before I blindly fix it with your suggestion 😃

[Zaimwa9]

Yes my bad, I don't know how I ended up on this line:

1. Wrong comment line from my side
2. I wasn't clear on this part but the screenshot comes from trying the fix locally to get to the root cause. The response payload was correct but defaulting to - because of the empty store

[Zaimwa9]

Approving following offline discussion unless we have a stable way to reproduce the fallback behavior I experienced