High priority fixes: PayPal env(), RadioApiKey Bearer-only, User restrict, SettingsService TTL, PHPStan config, + fix 7 broke points (forceFill)

2026-06-04 20:17:45 +02:00
parent b2bb1811d0
commit 9b5c655c68
10 changed files with 36 additions and 19 deletions
@@ -13,11 +13,11 @@ class RadioApiKey
 {
    public function handle(Request $request, Closure $next, string $permission = '*'): Response
    {
-        $key = $request->bearerToken() ?? $request->query('api_key');
+        $key = $request->bearerToken();

        if (empty($key)) {
            return response()->json([
-                'error' => 'API key is required. Use Authorization: Bearer <key> or ?api_key=<key>',
+                'error' => 'API key is required. Use Authorization: Bearer <key>',
            ], 401);
        }