apiKey
Builds an AuthenticationStrategy.Sync for opaque API-key authentication.
Assign the result to http.authentication. Only ApiKeyConfig.lookup is required. The identity type flowing through the extension is entirely yours — the extension attaches whichever identity and roles your ApiKeyLookup returns via ApiKeyDetails. To use ApiKeyAuthenticator directly, construct it and wrap it in a custom AuthenticationStrategy.Sync (or AuthenticationStrategy.sync).