Function extractApiKeyFromHeader

web/src/util/auth.ts:27–41

(req: NextRequest)

 * Extract api key from x-codebuff-api-key header or authorization header
 */
export function extractApiKeyFromHeader(req: NextRequest): string | undefined {
  const token = req.headers.get('x-codebuff-api-key')
  if (typeof token === 'string' && token) {
    return token
  }

  const authorization = req.headers.get('Authorization')
  if (!authorization) {
    return undefined
  }
  if (!authorization.startsWith('Bearer ')) {
    return undefined
  }
  return authorization.slice('Bearer '.length)
}