github-starred/better-auth
2
0
Fork 0
mirror of https://github.com/better-auth/better-auth.git synced 2026-05-26 17:06:41 -05:00
Code Issues 2.5k Packages Projects Releases 112 Wiki Activity

fix(api-key): remove strict length pre-check in verifyApiKey (#6259)

Browse Source 
Signed-off-by: GautamBytes <manchandanigautam@gmail.com>
Co-authored-by: Maxwell <145994855+ping-maxwell@users.noreply.github.com>
This commit is contained in:
Gautam Manchandani
2026-01-08 11:49:30 +05:30
committed by GitHub
parent b930ca61c9
commit 76a414cebb
2 changed files with 1 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
packages/better-auth/src/plugins/api-key/api-key.test.ts
View File

@@ -948,7 +948,7 @@ describe("api-key", async () => {
},
});
expect(apiKey.valid).toBe(false);
expect(apiKey.error?.code).toBe("KEY_NOT_FOUND");
expect(apiKey.error?.code).toBe("INVALID_API_KEY");
});
let rateLimitedApiKey: ApiKey;

14
packages/better-auth/src/plugins/api-key/routes/verify-api-key.ts
View File

@@ -246,20 +246,6 @@ export function verifyApiKey({
async (ctx) => {
const { key } = ctx.body;
if (key.length < opts.defaultKeyLength) {
// if the key is shorter than the default key length, than we know the key is invalid.
// we can't check if the key is exactly equal to the default key length, because
// a prefix may be added to the key.
return ctx.json({
valid: false,
error: {
message: ERROR_CODES.INVALID_API_KEY,
code: "KEY_NOT_FOUND" as const,
},
key: null,
});
}
if (opts.customAPIKeyValidator) {
const isValid = await opts.customAPIKeyValidator({ ctx, key });
if (!isValid) {