Api
Alias for function signature that is invoked when verifying an API key from a header.
The function receives the API key as a String parameter and should return an arbitrary principal object (for example, a user or service identity) if authentication succeeds, or null if authentication fails.