probe.go RawHistoryFolder

1package auth
2
3import (
4	"context"
5	"fmt"
6	"net/http"
7	"time"
8)
9
10// ProbeAPIKey verifies that key is valid for provider by making a
11// lightweight authenticated request. Returns nil on success.
12func ProbeAPIKey(ctx context.Context, provider, key string) error {
13	if key == "" {
14		return fmt.Errorf("empty key")
15	}
16	c := &http.Client{Timeout: 15 * time.Second}
17	var req *http.Request
18	var err error
19
20	switch provider {
21	case "anthropic":
22		req, err = http.NewRequestWithContext(ctx, "GET", "https://api.anthropic.com/v1/models", nil)
23		if err != nil {
24			return err
25		}
26		req.Header.Set("x-api-key", key)
27		req.Header.Set("anthropic-version", "2023-06-01")
28	case "openai":
29		req, err = http.NewRequestWithContext(ctx, "GET", "https://api.openai.com/v1/models", nil)
30		if err != nil {
31			return err
32		}
33		req.Header.Set("authorization", "Bearer "+key)
34	case "kimi":
35		req, err = http.NewRequestWithContext(ctx, "GET", "https://api.kimi.com/coding/v1/models", nil)
36		if err != nil {
37			return err
38		}
39		req.Header.Set("authorization", "Bearer "+key)
40	default:
41		return fmt.Errorf("unknown provider %q", provider)
42	}
43
44	resp, err := c.Do(req)
45	if err != nil {
46		return fmt.Errorf("probe %s: %w", provider, err)
47	}
48	defer resp.Body.Close()
49	if resp.StatusCode == http.StatusUnauthorized || resp.StatusCode == http.StatusForbidden {
50		return fmt.Errorf("%s rejected the key (http %d)", provider, resp.StatusCode)
51	}
52	if resp.StatusCode >= 400 {
53		return fmt.Errorf("%s http %d", provider, resp.StatusCode)
54	}
55	return nil
56}