3. Security and Validation

headerExtractor

Extracts an API key from a specific HTTP request header. By default, the header name is {@code X-Api-Key}. If the header is present, its first value is returned as the API key.

Example usage inside {@code <apiKey>}:

 <apiKey>
   <headerExtractor /> 

   
   <headerExtractor name="Authorization"/>
 </apiKey>
 

Can be used in:

apiKey and bean