Function apiKeyFromRequest

server/http_auth.go:72–78

apiKeyFromRequest returns the API key from the Authorization: Bearer header, or "" if absent. A non-Bearer Authorization header (e.g. Basic auth injected by a reverse proxy) is ignored.

(r *http.Request)

// apiKeyFromRequest returns the API key from the Authorization: Bearer header, or "" if absent.
// A non-Bearer Authorization header (e.g. Basic auth injected by a reverse proxy) is ignored.
func apiKeyFromRequest(r *http.Request) string {
	token, found := strings.CutPrefix(r.Header.Get("Authorization"), "Bearer ")
	if !found {
		return ""
	}
	return token
}

// jwtFromCookie returns the session JWT from the auth cookie, or "" if absent
func jwtFromCookie(r *http.Request) string {