decko-commons/decko

class CardController
  # add support for passing api key through header using X-API-Key
  module ApiKey
    def authenticators
      return {} unless request

      super.merge api_key: api_key_from_header || params[:api_key]
    end

    def api_key_from_header
      request.headers["X-API-Key"]
    end
  end
end