should i disable hashing in apiKey plugin for my case?

so i want to create chrome extension that will function in mostly all sites:
-> the main better-auth instance: tanstack start
-> the worker api: hono

and here's the flow:
-> user copy their apiKey in their profile dashboard in better-auth instance, which are coming from key column in apiKey table.
-> user put their apiKey in chrome extension interface, without login
-> everytime user request, the apiKey will send to hono worker
-> hono request to better-auth instance to validate apiKey
-> hono run the logic if the apiKey valid

i try to use combination of prefix
  • key that stored in database to validate the apiKey using auth.api.verifyApiKey(), it turns out the key still invalid. i'm thinking about maybe this is because the value in database is not the real value of the apiKey, is that true?
r is there any better way?
Was this page helpful?