fix(router): Take merchant ID from headers in API Key - Revoke (v2)

[AnuthaDev]

Type of Change

• Bugfix
• New feature
• Enhancement
• Refactoring
• Dependency updates
• Documentation
• CI/CD

Description

• Removed merchant ID from path in API Keys - Revoke
• Changed auth to read merchant ID from headers

Additional Changes

• This PR modifies the API contract
• This PR modifies the database schema
• This PR modifies application configuration/environment variables

Motivation and Context

Closes #8807

How did you test it?

• V1:
  Request:

curl --location --request DELETE 'http://localhost:8080/api_keys/merchant_1753949938/dev_8Xwp8SIyp0R4ItROu0tR' \
--header 'Content-Type: application/json' \
--header 'Accept: application/json' \
--header 'api-key: test_admin'

Response:

{
    "merchant_id": "merchant_1753949938",
    "key_id": "dev_8Xwp8SIyp0R4ItROu0tR",
    "revoked": true
}

• V2:
  Request:

curl --location --request DELETE 'http://localhost:8080/v2/api-keys/dev_DULXUEOAUgYKxuxE7PQN' \
--header 'x-merchant-id: cloth_seller_v2_hFIzh6a4wFsbtEkKYLxD' \
--header 'Authorization: admin-api-key=test_admin' \
--header 'api-key: test_admin'

Response:

{
    "merchant_id": "cloth_seller_v2_hFIzh6a4wFsbtEkKYLxD",
    "key_id": "dev_DULXUEOAUgYKxuxE7PQN",
    "revoked": true
}

Checklist

• I formatted the code cargo +nightly fmt --all
• I addressed lints thrown by cargo clippy
• I reviewed the submitted code
• I added unit tests for my changes where possible

[semanticdiff-com]

Review changes with  

Changed Files

File	Status
crates/router/src/routes/api_keys.rs	71% smaller
crates/router/src/core/api_keys.rs	0% smaller