Preserve generated API key token on create failure

Author: SirEdvin

frontend/src/pages/Profile.apiKeys.test.tsx

@@ -205,4 +205,41 @@ describe("Profile API keys", () => {
     expect(screen.getByRole("button", { name: /create api key/i })).toBeDisabled();
     expect(api.createApiKey).not.toHaveBeenCalled();
   });
+
+  it("keeps a one-time token visible if creating another API key fails", async () => {
+    vi.mocked(api.createApiKey)
+      .mockResolvedValueOnce({
+        apiKey: {
+          ...existingApiKey,
+          id: "key-2",
+          name: "First Token",
+          prefix: "exd_key_first",
+        },
+        token: "exd_key_first.secret-token-value",
+      })
+      .mockRejectedValueOnce(new Error("Network error"));
+
+    render(
+      <MemoryRouter>
+        <Profile />
+      </MemoryRouter>
+    );
+
+    await screen.findByText("Existing Key");
+
+    fireEvent.change(screen.getByLabelText(/api key name/i), {
+      target: { value: "First Token" },
+    });
+    fireEvent.click(screen.getByRole("button", { name: /create api key/i }));
+
+    expect(await screen.findByDisplayValue("exd_key_first.secret-token-value")).toBeInTheDocument();
+
+    fireEvent.change(screen.getByLabelText(/api key name/i), {
+      target: { value: "Second Token" },
+    });
+    fireEvent.click(screen.getByRole("button", { name: /create api key/i }));
+
+    expect(await screen.findByText(/failed to create api key/i)).toBeInTheDocument();
+    expect(screen.getByDisplayValue("exd_key_first.secret-token-value")).toBeInTheDocument();
+  });
 });

frontend/src/pages/Profile.tsx

@@ -289,9 +289,6 @@ export const Profile: React.FC = () => {
         setApiKeyActionLoading(true);
         setApiKeyError('');
         setSuccess('');
-        setGeneratedToken('');
-        setGeneratedTokenName('');
-        setCopiedToken(false);
 
         try {
             const response = await api.createApiKey(trimmedName, selectedApiKeyScopes);
@@ -300,6 +297,7 @@ export const Profile: React.FC = () => {
             setSelectedApiKeyScopes([...api.API_KEY_SCOPES]);
             setGeneratedToken(response.token);
             setGeneratedTokenName(response.apiKey.name);
+            setCopiedToken(false);
             setSuccess('API key created. Copy the token now; it will not be shown again.');
         } catch (err: unknown) {
             setApiKeyError(getApiErrorMessage(err, 'Failed to create API key'));