Authentication Errors

{
  "error": {
    "code": "authentication_failed",
    "message": "Invalid API key"
  }
}

# Typo or incomplete key
# client = BrainusAI(api_key="brainus_1234")

# Correct full key (loaded from env)
# client = BrainusAI(api_key=os.getenv("BRAINUS_API_KEY"))

# Using test key for production
# client = BrainusAI(api_key="sk_test_...")  # Won't work in production

# Use correct environment
# client = BrainusAI(api_key=os.getenv("BRAINUS_API_KEY"))

# Check environment variable
echo $BRAINUS_API_KEY

# Test the key
curl -X POST "https://api.brainus.lk/api/v1/query" \
  -H "X-API-Key: $BRAINUS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query": "test", "store_id": "default"}'

{
  "error": {
    "code": "missing_api_key",
    "message": "API key is required"
  }
}

# Check if set
env | grep BRAINUS_API_KEY

# If empty, set it
export BRAINUS_API_KEY=brainus_your_key_here

# Forgot to load .env
from brainus_ai import BrainusAI
import os

# client = BrainusAI(api_key=os.getenv("BRAINUS_API_KEY"))  # None!

# Load .env first
from dotenv import load_dotenv
import os

load_dotenv()  # Important!
client = BrainusAI(api_key=os.getenv("BRAINUS_API_KEY"))

# Wrong header
curl -H "Authorization: Bearer brainus_..."

# Correct header
curl -H "X-API-Key: $BRAINUS_API_KEY"

{
  "error": {
    "code": "api_key_revoked",
    "message": "This API key has been revoked"
  }
}

{
  "error": {
    "code": "forbidden",
    "message": "API key does not have permission to access this resource"
  }
}

# Check your plan limits using SDK (pseudo-code)
# usage = await client.get_usage()
# print(f"Plan: {usage.plan}")

# Test with curl
curl -i -X POST "https://api.brainus.lk/api/v1/query" \
  -H "X-API-Key: $BRAINUS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query": "test", "store_id": "default"}'

import re
import os

def validate_key_format(api_key: str) -> bool:
    pattern = r'^sk_(live|test)_[a-zA-Z0-9]{32,}$'
    return bool(re.match(pattern, api_key))

key = os.getenv("BRAINUS_API_KEY")
if key and not validate_key_format(key):
    print("Invalid key format!")

import logging
import requests
from brainus_ai import BrainusAI

# Enable debug logging
logging.basicConfig(level=logging.DEBUG)

# See actual headers sent
# client = BrainusAI(api_key="brainus_your_key")

import os

# Print environment (hide sensitive parts)
api_key = os.getenv("BRAINUS_API_KEY", "")
if api_key:
    print(f"Key found: {api_key[:10]}...{api_key[-4:]}")
else:
    print("BRAINUS_API_KEY not set!")

# Bad: Logs full key
# logging.info(f"Using key: {api_key}")

# Good: Mask key
logging.info(f"Using key: {api_key[:10]}...{api_key[-4:]}")

# Every 90 days
0 0 1 */3 * /scripts/rotate-api-keys.sh

# Development
BRAINUS_API_KEY=sk_test_dev_key

# Production
BRAINUS_API_KEY=brainus_prod_key

# NEVER do this
# client = BrainusAI(api_key="brainus_1234567890abcdef")

# Use environment variables
from brainus_ai import BrainusAI
import os
client = BrainusAI(api_key=os.getenv("BRAINUS_API_KEY"))

// NEVER expose in browser
import { BrainusAI } from '@brainus/ai';

// const client = new BrainusAI({
//   apiKey: "brainus_1234567890...", // Visible to users!
// });

// Use backend proxy
const response = await fetch("/api/query", {
  method: "POST",
  body: JSON.stringify({ query: "test" }),
});

# Add .env to .gitignore
echo ".env" >> .gitignore

# If you accidentally committed a key:
# 1. Revoke it immediately
# 2. Generate a new key
# 3. Use git-secrets or similar tools