3. Security and Validation

headerExtractor

Version

Deprecated: Set an expression like ${header['api']} on apiKey
Extracts an API key from a specific HTTP request header. By default, the header name is X-Api-Key. If the header is present, its first value is returned as the API key.

Example usage inside <apiKey>:


    

   
   
 

Attributes

NameRequiredDefaultDescriptionExamples
namefalseX-Api-KeyThe HTTP header name to check for an API key.Authorization

Can be used in