Function checkInternalApiKey

apps/sim/lib/copilot/request/http.ts:87–104

(req: NextRequest)

}

export function checkInternalApiKey(req: NextRequest) {
  const apiKey = req.headers.get('x-api-key')
  const expectedApiKey = env.INTERNAL_API_SECRET

  if (!expectedApiKey) {
    return { success: false, error: 'Internal API key not configured' }
  }

  if (!apiKey) {
    return { success: false, error: 'API key required' }
  }

  if (!safeCompare(apiKey, expectedApiKey)) {
    return { success: false, error: 'Invalid API key' }
  }

  return { success: true }
}