Request always directed to production endpoint when using API Key

[tharikaGitHub]

Description:

After configuring an API to use only API Key security, when invoking the API using the sandbox API Key, the request is directed to the production endpoint.

Steps to reproduce:

1. Create an API in Publisher with API Key application level security under runtime configurations. Note to untick OAuth security. Only API Key should be selected.
2. Define 2 different endpoints that would return different responses for the Production and the Sandbox endpoints.
3. Go to Developer Portal and subscribe the API to an application.
4. Generate Sandbox API Key and invoke the API selecting the SANDBOX environment from the drop down.
5. The Production endpoint's response is shown even though the Sandbox API key is provided.