Interface ReceivedCredentials

Non-sensitive summary of the credentials a request carried.

interface ReceivedCredentials {
authorization: "absent" | "bearer" | "api-key" | "non-bearer-scheme";
apikey: ApiKeyFormat;
}

Index

Properties

authorization apikey

Properties

authorization

authorization: "absent" | "bearer" | "api-key" | "non-bearer-scheme"

What the Authorization header carried.

'bearer' — a bearer token that looks like a JWT
'api-key' — an sb_* API key, which the Supabase SDK forwards here alongside the apikey header; not a user token
'non-bearer-scheme' — present but unusable (wrong scheme, wrong casing, bare value, empty token)
'absent' — no header

apikey

apikey: ApiKeyFormat

The apikey header classified by prefix. Never the value itself.