candle-annotator/openspec/changes
Marko Djordjevic 577bb2e56e feat: add API key auth middleware for /api/* routes (task 3.1)
- Create src/middleware.ts with Next.js middleware
- Reads API_KEY env var and checks X-API-Key header on all /api/* routes
- Skips auth for /api/health endpoint
- Fails open (with warning) when API_KEY is not configured
- Returns 401 Unauthorized when key is missing or mismatched
- Mark task 3.1 as complete in tasks.md

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-18 11:02:51 +01:00
..
archive sync: ml-ui-connection delta specs to main specs 2026-02-18 10:21:05 +01:00
code-review-fix feat: add API key auth middleware for /api/* routes (task 3.1) 2026-02-18 11:02:51 +01:00