We're introducing API keys to help developers provide secure authentication to their APIs. In workos/workos-node#1373, we added a method to the workos-node SDK to expose the validate API key endpoint. This PR adds a function that Next.js apps can use to parse the Bearer Authentication header and validate the API key.

Here's what a call to this new function might look like in a developer's application:

import { NextResponse } from 'next/server'
import { validateApiKey } from '@workos-inc/authkit-nextjs'

export async function GET() {
  const { apiKey } = await validateApiKey()

  if (!apiKey) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
  }

  return NextResponse.json({ success: true })
}