funcodingdev
diff --git a/‎api/pkg/middlewares/api_key_auth_middleware.go‎
Lines changed: 20 additions & 0 deletions b/‎api/pkg/middlewares/api_key_auth_middleware.go‎
Lines changed: 20 additions & 0 deletions
@@ -20,6 +20,10 @@ func APIKeyAuth(logger telemetry.Logger, tracer telemetry.Tracer, userRepository
 		ctxLogger := tracer.CtxLogger(logger, span)
 
 		apiKey := c.Get(authHeaderAPIKey)
+		if len(apiKey) == 0 {
+			apiKey = getAPIKeyFromPayload(c)
+		}
+
 		if len(apiKey) == 0 || apiKey == "undefined" {
 			span.AddEvent(fmt.Sprintf("the request header has no [%s] header", authHeaderAPIKey))
 			return c.Next()
@@ -35,3 +39,19 @@ func APIKeyAuth(logger telemetry.Logger, tracer telemetry.Tracer, userRepository
 		return c.Next()
 	}
 }
+
+func getAPIKeyFromPayload(c *fiber.Ctx) string {
+	payload := struct {
+		APIKey string `json:"x-api-key" form:"x-api-key" query:"x-api-key"`
+	}{}
+
+	if err := c.BodyParser(&payload); err != nil || payload.APIKey == "" {
+		return ""
+	}
+
+	if err := c.QueryParser(&payload); err != nil {
+		return ""
+	}
+
+	return payload.APIKey
+}