Terence Ong 4f704a5dcd fix: add key format validation to validate_credentials_detailed() ...

Root cause of the 401 was a corrupted API key: the WordPress auth
salt changed after the key was encrypted, so decryption produced
garbage instead of sk-or-... OpenRouter interprets the garbled
Bearer token as "Missing Authentication header."

Adds the same sk-or- prefix check to the credential validation
method so users see a clear "re-enter your key" message instead
of a cryptic 401 error.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-13 08:48:32 +07:00

14 KiB

Raw Blame History

View Raw