adrianbonpin
3ed0ee3128
fix: API key test now actually verifies the key against a real auth endpoint
...
The old test hit /api/games/lookup which is a public endpoint with no auth,
so it never checked the key — any key (or a deleted one) reported as valid.
- Add GET /api/plugin/verify-key endpoint that uses authenticateWithApiKey
to properly verify the x-api-key header via Better Auth
- Plugin test_api_key now calls /api/plugin/verify-key instead of games-lookup
- Returns the linked user's name + avatar on success for richer feedback
2026-06-28 22:22:47 +08:00
..
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 22:09:39 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 17:36:32 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 21:34:14 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:31:30 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:31:30 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 22:22:47 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00
2026-06-28 05:20:28 +08:00