577bb2e56e
- Create src/middleware.ts with Next.js middleware - Reads API_KEY env var and checks X-API-Key header on all /api/* routes - Skips auth for /api/health endpoint - Fails open (with warning) when API_KEY is not configured - Returns 401 Unauthorized when key is missing or mismatched - Mark task 3.1 as complete in tasks.md Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| changes | ||
| specs | ||
| config.yaml | ||