openrouter_api 0.6.0

//! Authentication utilities for managing API keys and authorization tokens.

use crate::client::SecureApiKey;
use crate::error::{Error, Result};
use std::env;

/// Attempts to load an API key from environment variables.
/// Checks for OPENROUTER_API_KEY and OR_API_KEY.
pub fn load_api_key_from_env() -> Result<String> {
    // Try to read the API key from common environment variables
    if let Ok(key) = env::var("OPENROUTER_API_KEY") {
        if !key.trim().is_empty() {
            return Ok(key);
        }
    }

    if let Ok(key) = env::var("OR_API_KEY") {
        if !key.trim().is_empty() {
            return Ok(key);
        }
    }

    Err(Error::MissingCredential(
        "API key not found in environment variables OPENROUTER_API_KEY or OR_API_KEY".into(),
    ))
}

/// Validates an API key format.
/// Basic validation to check if the key is non-empty and has a reasonable length.
pub fn validate_api_key(key: &str) -> Result<()> {
    let key = key.trim();

    if key.is_empty() {
        return Err(Error::ConfigError("API key cannot be empty".into()));
    }

    if key.len() < 10 {
        return Err(Error::ConfigError("API key is too short".into()));
    }

    // Most OpenRouter keys are in a specific format, but we don't check exact patterns
    // to allow for different key formats in the future

    Ok(())
}

/// Loads a secure API key from environment variables.
/// Returns a SecureApiKey that automatically zeros memory on drop.
pub fn load_secure_api_key_from_env() -> Result<SecureApiKey> {
    let key_str = load_api_key_from_env()?;
    SecureApiKey::new(key_str)
}

#[cfg(test)]
#[path = "auth_tests.rs"]
mod auth_tests;