The default resolver: header with the standard X-Api-Key header.
X-Api-Key
Extracts the API key from the cookie named name.
Extracts the API key from headerName (defaults to X-Api-Key).
Extracts the API key from the query parameter named paramName.