Function apiKeyHasPermission

server/src/middleware/auth.ts:250–252

* Check if validated API key has a specific permission

(apiKey: ValidatedApiKey, permission: string)

 * Check if validated API key has a specific permission
 */
function apiKeyHasPermission(apiKey: ValidatedApiKey, permission: string): boolean {
  return apiKey.permissions.includes(permission);
}

/**
 * Validated OAuth bearer token — a WorkOS-signed JWT issued via the