webdav token regeneration

backend/src/routes/auth.rs

@@ -533,7 +533,10 @@ pub async fn list_tenants(
             .select(tenant_dsl::name)
             .first(&mut tenant_conn)
             .map_err(AppError::from)?;
-        tenants.push(TenantSnippet { id: tenant_id, name });
+        tenants.push(TenantSnippet {
+            id: tenant_id,
+            name,
+        });
     }
 
     Ok(Json(TenantListResponse { tenants }))
@@ -699,7 +702,10 @@ fn complete_login(
             .select(tenant_dsl::name)
             .first(&mut tenant_conn)
             .map_err(AppError::from)?;
-        tenants.push(TenantSnippet { id: tenant_id, name });
+        tenants.push(TenantSnippet {
+            id: tenant_id,
+            name,
+        });
     }
 
     Ok(Json(TenantSelectionResponse {

backend/src/routes/mod.rs

@@ -148,6 +148,10 @@ pub fn create_router(state: AppState) -> Router<()> {
             "/webdav-tokens",
             get(profile::list_webdav_tokens).post(profile::create_webdav_token),
         )
+        .route(
+            "/webdav-tokens/:id/regenerate",
+            post(profile::regenerate_webdav_token),
+        )
         .route("/webdav-tokens/:id", delete(profile::delete_webdav_token))
         .route("/passkeys", get(profile::list_passkeys))
         .route("/passkeys/:id", delete(profile::delete_passkey));

backend/src/routes/profile.rs

@@ -12,7 +12,7 @@ use crate::auth::{
     passkeys::PasskeySummary,
     webdav_tokens::{
         create_webdav_token as issue_token, list_webdav_tokens as load_tokens,
-        revoke_webdav_token as revoke_token,
+        regenerate_webdav_token as rotate_token, revoke_webdav_token as revoke_token,
     },
     TenantScopedConn,
 };
@@ -134,6 +134,31 @@ pub async fn create_webdav_token(
     Ok((StatusCode::CREATED, Json(response)))
 }
 
+#[utoipa::path(
+    post,
+    path = "/api/profile/webdav-tokens/{id}/regenerate",
+    params(("id" = Uuid, Path, description = "WebDAV token ID")),
+    responses((status = 200, description = "WebDAV token regenerated", body = WebdavTokenCreatedResponse)),
+    tag = "Profile"
+)]
+pub async fn regenerate_webdav_token(
+    TenantScopedConn {
+        mut conn,
+        tenant_id,
+        user_id,
+        ..
+    }: TenantScopedConn,
+    Path(token_id): Path<Uuid>,
+) -> AppResult<Json<WebdavTokenCreatedResponse>> {
+    let issued = rotate_token(&mut conn, token_id, user_id, Some(tenant_id))?;
+    let response = WebdavTokenCreatedResponse {
+        token: issued.token,
+        token_info: webdav_token_to_response(issued.record),
+    };
+
+    Ok(Json(response))
+}
+
 #[utoipa::path(
     delete,
     path = "/api/profile/webdav-tokens/{id}",
@@ -208,6 +233,7 @@ fn parse_timestamp(value: &str) -> AppResult<NaiveDateTime> {
     paths(
         crate::routes::profile::list_webdav_tokens,
         crate::routes::profile::create_webdav_token,
+        crate::routes::profile::regenerate_webdav_token,
         crate::routes::profile::delete_webdav_token,
         crate::routes::profile::list_passkeys,
         crate::routes::profile::delete_passkey

backend/src/routes/webdav/mod.rs

@@ -21,8 +21,7 @@ use crate::error::{AppError, AppResult};
 use crate::models::{Document, DocumentVersion, Folder, User};
 use crate::schema::{
     document_versions::dsl as document_versions_dsl, documents::dsl as documents_dsl,
-    folders::dsl as folders_dsl, user_memberships::dsl as memberships_dsl,
-    users::dsl as users_dsl,
+    folders::dsl as folders_dsl, user_memberships::dsl as memberships_dsl, users::dsl as users_dsl,
 };
 use crate::state::AppState;
 use crate::tenants::{apply_tenant_guc, apply_user_guc, clear_user_guc};