Function applyAuthHeader

backend/go/cloud-proxy/proxy.go:414–424

applyAuthHeader writes the appropriate authorization header for the provider. OpenAI/Anthropic/most providers use Bearer; Anthropic historically uses x-api-key + anthropic-version, but accepts Bearer too via the OpenAI-compatible path. Default to Bearer when provider is empty (passthrough mode where

(req *http.Request, provider, key string)

// is empty (passthrough mode where the operator doesn't claim a
// provider).
func applyAuthHeader(req *http.Request, provider, key string) {
	switch provider {
	case providerAnthropic:
		req.Header.Set("x-api-key", key)
		if req.Header.Get("anthropic-version") == "" {
			req.Header.Set("anthropic-version", "2023-06-01")
		}
	default:
		req.Header.Set("Authorization", "Bearer "+key)
	}
}

// isHopByHopHeader returns true for headers that should not be
// forwarded from the client request to the upstream (RFC 7230 §6.1