Expand description
API-key extraction from the fixed X-API-Key and Api-Key fields.
X-API-Key takes precedence; Api-Key is consulted only when it is absent.
The selected value is returned unchanged, including an empty value. This
module selects a text field but does not validate or authenticate it. API keys
are sensitive: callers must not log or otherwise disclose returned values,
and extraction errors never include them.
Functionsยง
- extract_
header_ api_ key - Extract an API key from request fields.
- extract_
request_ api_ key - Extract an API key from a complete request.