Linux volcengine bigasr api_key mode fails with 45000010 AuthenticationError

[linonetwo]

Summary

On Linux, OpenLess volcengine ASR with api_key auth consistently fails with 45000010 AuthenticationError, even when the same Ark API key is valid and actively used.

Environment

• OS: Linux
• OpenLess: current desktop build
• ASR provider: volcengine (bigasr)
• Auth mode: api_key
• Resource ID tested:
  • volc.seedasr.sauc.duration (default)
  • volc.bigasr.sauc.duration (A/B test)

Observed behavior

Each dictation attempt reaches:

• recorder started
• ASR connected
• session started

Then fails immediately with:

• error frame code=45000010
• AuthenticationError
• message: The API key or AK/SK in the request is missing or invalid.

Reproduction

1. Configure ASR provider as volcengine.
2. Set auth mode to api_key.
3. Fill API key and Resource ID (volc.seedasr.sauc.duration).
4. Trigger dictation (Right Alt or openless --toggle-dictation).
5. Session starts then fails with 45000010.

Source-level findings

I verified current source paths:

• API-key mode endpoint:
  • src-tauri/src/asr/volcengine.rs
  • ENDPOINT_API_KEY = wss://openspeech.bytedance.com/api/v3/plan/sauc/bigmodel_async
• API-key header wiring:
  • X-Api-Key in build_connect_request for VolcengineAuthMode::ApiKey
• Default resource ID:
  • volc.seedasr.sauc.duration
• Settings UI mapping looks correct:
  • volcengine.auth_mode, volcengine.api_key, volcengine.resource_id

A/B test result

Changing only resourceId from volc.seedasr.sauc.duration to volc.bigasr.sauc.duration still returns the same 45000010 AuthenticationError (not a different resource-grant error).

Important checks already done

• API key was regenerated under target project and actively used.
• Project switch and key recreation repeated.
• Free authorization flow in Volc speech console completed.
• OpenLess keyring credentials were reset/restored; issue persists.
• CLI trigger path (openless --toggle-dictation) reproduces same failure.

Latest request IDs (for backend trace)

• 021786027527040c03100eb43b2c5f2b8bc80f...
• 0217860275287052776333f3b283eee8f5b1f8...
• 0217860275299011fabb13063b3e354601db29...

Request

Please help confirm whether current volcengine + api_key path is still valid for bigasr on Linux, and whether endpoint/header/resource expectations have changed.

If possible, please provide a known-good matrix for:

• auth_mode
• websocket endpoint
• required auth headers
• resource_id format