Function hasValidAdminApiKey

server/src/middleware/auth.ts:572–580

* Check if request has a valid static admin API key * Returns true if the Bearer token matches ADMIN_API_KEY

(req: Request)

 * Returns true if the Bearer token matches ADMIN_API_KEY
 */
function hasValidAdminApiKey(req: Request): boolean {
  if (!ADMIN_API_KEY) return false;
  const authHeader = req.headers.authorization;
  if (!authHeader?.startsWith('Bearer ')) return false;
  const token = authHeader.slice(7);
  // Don't match WorkOS API keys - those are handled separately
  if (isWorkOSApiKeyFormat(token)) return false;
  return token === ADMIN_API_KEY;
}

/**
 * Middleware to require authentication