[Bug]: API Key name needs 3 or more chars in Gateway - but not validated in CP
Open
@thivindu is already working on this.
Since Aug 14, 2026.
Area/AIWorkspace
Aspect/API
Aspect/UI
Severity/Major
Type/Bug
- Dominant language
- Go
- Stars
- 71
- Forks
- 111
- Avg merge
- 1d 14h
- Merged PRs (30d)
- 110
Description
Please select the area the issue is related to
AI Workspace, Gateway
Please select the aspect the issue is related to
Aspect/UI (Frontend layouts, components, styling), Aspect/API (API backends, definitions, contracts, interfaces, OpenAPI)
Description
gateway-controller-1 | time=2026-08-06T04:55:29.467Z level=INFO source=/build/pkg/policyxds/server.go:228 msg="Policy xDS stream request" stream_id=1 type_url=api-platform.wso2.org/v1.RouteConfig version=3 resource_names=[]
gateway-controller-1 | time=2026-08-06T04:55:29.467Z level=INFO source=/build/pkg/policyxds/snapshot.go:446 msg="[linear cache] open watch 3 (delta: false) for api-platform.wso2.org/v1.RouteConfig all resources"
gateway-controller-1 | time=2026-08-06T04:55:29.467Z level=INFO source=/build/pkg/policyxds/server.go:228 msg="Policy xDS stream request" stream_id=1 type_url=api-platform.wso2.org/v1.PolicyChainConfig version=3 resource_names=[]
gateway-controller-1 | time=2026-08-06T04:55:29.467Z level=INFO source=/build/pkg/policyxds/snapshot.go:446 msg="[linear cache] open watch 3 (delta: false) for api-platform.wso2.org/v1.PolicyChainConfig all resources"
gateway-controller-1 | time=2026-08-06T04:56:16.244Z level=INFO source=/build/pkg/controlplane/client.go:1369 msg="Received WebSocket event" type=apikey.created payload="[REDACTED - contains sensitive API key data]"
gateway-controller-1 | time=2026-08-06T04:56:16.244Z level=INFO source=/build/pkg/controlplane/client.go:2941 msg="API Key Created Event received" correlation_id=d609dbbc-01bf-444d-935c-f80d49e7ebed timestamp=2026-08-06T04:56:16Z
gateway-controller-1 | time=2026-08-06T04:56:16.244Z level=ERROR source=/build/pkg/controlplane/client.go:2982 msg="API key created event has invalid name" correlation_id=d609dbbc-01bf-444d-935c-f80d49e7ebed error="API key name is too short (minimum 3 characters required)"
gateway-runtime-1 | [rtr] [2026-08-06 04:56:57.964][55][info][main] [source/server/drain_manager_impl.cc:226] shutting down parent after drain
Steps to Reproduce
Create an LLM provider and create a key with less than 3 chars.
Severity Level of the Issue
Severity/Major (Important functionality is broken. Should be prioritized. Doesn't need immediate attention)
Environment Details (with versions)
No response
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.