API: Document x-api-key header auth

resources/api/openapi.yml

@@ -36,12 +36,20 @@ tags:
   - name: user
     description: User information
 
+security:
+  - bearer-auth: [ ]
+  - api-key-header: [ ]
+
 components:
   securitySchemes:
-    bearerAuth:
+    bearer-auth:
       type: http
       scheme: bearer
       bearerFormat: API key from settings
+    api-key-header:
+      type: apiKey
+      name: x-api-key
+      in: header
 
   responses:
     UnauthorizedError: # 401
@@ -421,9 +429,6 @@ components:
         - event
         - teardown
 
-security:
-  - bearerAuth: [ ]
-
 paths:
   /angeltypes:
     get:

src/Controllers/Api/IndexController.php

@@ -87,7 +87,7 @@ class IndexController extends ApiController
         return $this->response
             ->setStatusCode(200)
             ->withHeader('allow', 'OPTIONS, HEAD, GET')
-            ->withHeader('access-control-allow-headers', 'Authorization');
+            ->withHeader('access-control-allow-headers', 'Authorization, x-api-key');
     }
 
     public function notFound(): Response