Review this Go middleware that authenticates internal service-to-service calls with a shared API key.