OptionalbearerOptionalheaderThe header that carries the key. Default X-API-Key; false for none.
OptionalqueryAlso take the key from this query parameter (it ends up in access logs).
OptionaltoThe actor from the record. Default: { kind: 'apiKey', id, name, scopes, metadata }.
Also take the key from
Authorization: Bearer. Default false.