feat: gemini pass API key in header for security (#1360)

Co-authored-by: Aman Shaw <amanshaw4511@protonmail.com>
Co-authored-by: aman <aman.saw@batonsystems.com>

1 files changed, 5 insertions, 4 deletions

diff --git a/src/client/gemini.rs b/src/client/gemini.rs
index 77304e7..3c8778d 100644
--- a/src/client/gemini.rs
+++ b/src/client/gemini.rs
@@ -52,16 +52,17 @@ fn prepare_chat_completions(
     };
 
     let url = format!(
-        "{}/models/{}:{}?key={}",
+        "{}/models/{}:{}",
         api_base.trim_end_matches('/'),
         self_.model.real_name(),
-        func,
-        api_key
+        func
     );
 
     let body = gemini_build_chat_completions_body(data, &self_.model)?;
 
-    let request_data = RequestData::new(url, body);
+    let mut request_data = RequestData::new(url, body);
+
+    request_data.header("x-goog-api-key", api_key);
 
     Ok(request_data)
 }