[FIX] auth_api_key: Read API key from headers

Author: SirPyTech

auth_api_key/models/ir_http.py

@@ -18,7 +18,7 @@ class IrHttp(models.AbstractModel):
 
     @classmethod
     def _auth_method_api_key(cls):
-        headers = request.httprequest.environ
+        headers = request.httprequest.headers
         api_key = headers.get("HTTP_API_KEY")
         if api_key:
             request.update_env(user=1)

auth_api_key/tests/test_auth_api_key.py

@@ -3,6 +3,8 @@
 from odoo.exceptions import AccessError, ValidationError
 from odoo.tests.common import TransactionCase
 
+from odoo.addons.website.tools import MockRequest
+
 
 class TestAuthApiKey(TransactionCase):
     @classmethod
@@ -68,3 +70,11 @@ def test_user_archived_unarchived_with_option_off(self):
         self.assertEqual(
             self.env["auth.api.key"]._retrieve_uid_from_api_key("api_key"), demo_user.id
         )
+
+    def test_api_key_headers(self):
+        """The API key in the headers is read."""
+        with MockRequest(self.env) as mocked_request:
+            mocked_request.httprequest.headers = {
+                "HTTP_API_KEY": self.api_key_good.key,
+            }
+            self.assertTrue(self.env["ir.http"]._auth_method_api_key())