Runestone Issue: API keys shows two keys are added when only one is added & missing edit/delete controls

[xinyinghou]

What Page were you on
Please copy/paste the URL from your address bar.

Describe the bug
When a teacher adds a single API key, the UI displays two keys are added instead of one. Additionally, existing API keys cannot be modified or removed, making it impossible to manage previously created keys.

A Screenshot is worth a thousand words

Issue.mp4

Javascript Errors
'message': 'Incorrect API key provided
'code': 'invalid_api_key'

What is your username
xyhou

[bnmnetp]

So you added two different API tokens today.

I guess we should allow instructors to delete an API key if it is no longer valid but that seems like an edge case. Most are going to add one key for the term that that is it.

[xinyinghou]

just to clarify, does the message "Added two tokens for provider xxx" indicate the total number of keys added, rather than the number added by this ‘Save Tokens’ click?

[bnmnetp]

Yes, the message should say: "You now have {X} tokens for provider {Y}" when you add a token.

[xinyinghou]

Thanks! I just created a new account CodeTailorTeacher, a new course codetailor_testing_py4e-int_winter26and entered a newly-created OpenAI API key. But when I call to use it, I always get
Error: HTTP 500 - {"detail":"Error code: 429 - {'error': {'message': 'You exceeded your current quota, please check your plan and billing details. For more information on this error, read the docs: https://platform.openai.com/docs/guides/error-codes/api-errors.', 'type': 'insufficient_quota', 'param': None, 'code': 'insufficient_quota'}}"}

I tested the same API key and it works on my own Runestone server. Since the key is valid, this does not appear to be an OpenAI billing or quota issue with the key. What might be causing it to consistently return a “You exceeded your current quota” error on the main server?

[bnmnetp]

I have no idea, we just store the tokens for use by whatever code might need them. I would try to ensure that you are getting the correct token.

[bnmnetp]

I added the ability to delete all tokens for a course. These tokens should be treated like github and other API tokens. Once you have created them they are never displayed on the web again. If you screw up pasting in the token then you will have to delete the token for your course and do it again.

[xinyinghou]

Thanks for adding this! I already used this feature today when working with API keys, very convenient