ref: validate config keys

Author: jianyuan

.github/workflows/test.yml

@@ -82,6 +82,7 @@ jobs:
       - env:
           TF_ACC: "1"
           OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          OPENAI_SESSION_KEY: ${{ secrets.OPENAI_SESSION_KEY }}
           OPENAI_TEST_ORGANIZATION_ID: ${{ secrets.OPENAI_TEST_ORGANIZATION_ID }}
         run: go test -v -cover ./internal/provider/
         timeout-minutes: 10

internal/provider/provider.go

@@ -86,6 +86,9 @@ func (p *OpenAIProvider) Configure(ctx context.Context, req provider.ConfigureRe
 	if apiKey == "" {
 		resp.Diagnostics.AddError("api_key is required", "api_key is required")
 		return
+	} else if !strings.HasPrefix(apiKey, "sk-") {
+		resp.Diagnostics.AddError("api_key must start with 'sk-'", "api_key must start with 'sk-'")
+		return
 	}
 
 	var sessionKey string
@@ -98,6 +101,9 @@ func (p *OpenAIProvider) Configure(ctx context.Context, req provider.ConfigureRe
 	if sessionKey == "" {
 		resp.Diagnostics.AddError("session_key is required", "session_key is required")
 		return
+	} else if !strings.HasPrefix(sessionKey, "sess-") {
+		resp.Diagnostics.AddError("session_key must start with 'sess-'", "session_key must start with 'sess-'")
+		return
 	}
 
 	client, err := apiclient.NewClientWithResponses(