From 5029890831c15c21ee2ee846861655d74073eb73 Mon Sep 17 00:00:00 2001
From: mamoss <>
Date: Wed, 12 Nov 2025 01:55:06 +0700
Subject: [PATCH] check api-key

---
 src/middlewares/auth.ts | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/middlewares/auth.ts b/src/middlewares/auth.ts
index 396ada4d..1f636080 100644
--- a/src/middlewares/auth.ts
+++ b/src/middlewares/auth.ts
@@ -27,6 +27,14 @@ export async function expressAuthentication(
   securityName: string,
   _scopes?: string[],
 ) {
+  // API_KEY bypass logic (support api_key, x-api-key, apikey)
+  const apiKeyHeader =
+    request.headers["api-key"] || request.headers["x-api-key"] || request.headers["apikey"];
+  if (apiKeyHeader !== undefined) {
+    if (apiKeyHeader === process.env.API_KEY) {
+      return { preferred_username: "api_key_bypass", apiKeyBypass: true };
+    }
+  }
   if (process.env.NODE_ENV !== "production" && process.env.AUTH_BYPASS) {
     return { preferred_username: "bypassed" };
   }