[Duplicate]: Protect api key routes

[resolvicomai]

Summary

• add /api-keys and /api-keys/:path* to the Studio proxy matcher
• add a contract test covering API key route protection

Fixes #65

Validation

• npm run test:contracts -w @veriworkly/studio -- proxy-auth.contract.test.ts
• npm run test:contracts -w @veriworkly/studio
• npm run lint -w @veriworkly/studio
• npm run format -w @veriworkly/studio -- proxy.ts tests/contracts/proxy-auth.contract.test.ts

Note: npm audit signatures currently fails before signature validation because npm cannot resolve @types/node@25.8.0 from the existing dependency graph.

[Gautam25Raj]

Hi @resolvicomai, thanks for submitting this PR to address the API key route protection!

Before we merge, we have a few pieces of feedback regarding the implementation and the test:

1. Workflow Reminder: For future contributions, please comment on the issue and wait to be assigned before opening a PR. This helps us coordinate and prevents overlapping work.

2. Redundant Route Matchers: In Next.js middleware, the :path* syntax matches zero or more path segments. * "/api-keys/:path*" already covers both /api-keys and all of its subpaths (like /api-keys/create).

   • Please remove the redundant base path matchers (e.g., "/api-keys", "/admin", "/profile") from config.matcher and stick to the wildcards (e.g., "/api-keys/:path*").

If you can update the PR to clean up the matcher array and remove the test file, we'll be ready to get this formatted and merged!

[resolvicomai]

Updated in b5cfb3c. Removed the redundant /api-keys matcher so the route is covered only by /api-keys/:path*, and deleted the contract test file as requested.

Re-validated:

• npm run test:contracts -w @veriworkly/studio
• npm run lint
• git diff --check

[Gautam25Raj]

Hi @resolvicomai, thank you for the PR!

Unfortunately, we already have an open PR addressing this issue, so we will be closing this one to avoid duplicate work.

However, we currently have an unassigned open issue (#61). If you'd like to work on that one, please drop a comment directly on #61 requesting assignment so we can assign it to you. Thanks!