Add gateway-first pattern: when AGILITON_API_KEY is set, route all external API calls through the gateway with X-API-Key auth. Falls back to direct API access when gateway is unavailable. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
8 lines
293 B
JavaScript
8 lines
293 B
JavaScript
import { JWEInvalid } from '../util/errors.js';
|
|
export function checkCekLength(cek, expected) {
|
|
const actual = cek.byteLength << 3;
|
|
if (actual !== expected) {
|
|
throw new JWEInvalid(`Invalid Content Encryption Key length. Expected ${expected} bits, got ${actual} bits`);
|
|
}
|
|
}
|