From eff0c06cb09051f2298bfaf1bfbec8ebd6461f2d Mon Sep 17 00:00:00 2001
From: Ngo Quoc Viet <123613986+NgoQuocViet2001@users.noreply.github.com>
Date: Sun, 13 Sep 2026 02:52:20 +0700
Subject: [PATCH] fix(importer-postman): stop swapping the API key name and its
 value (#643)

---
 plugins/importer-postman/src/index.ts                    | 6 ++++--
 plugins/importer-postman/tests/fixtures/auth.input.json  | 4 ++--
 plugins/importer-postman/tests/fixtures/auth.output.json | 4 ++--
 3 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/plugins/importer-postman/src/index.ts b/plugins/importer-postman/src/index.ts
index 7e617e43..9f05859f 100644
--- a/plugins/importer-postman/src/index.ts
+++ b/plugins/importer-postman/src/index.ts
@@ -294,8 +294,10 @@ function importAuth(rawAuth: unknown): Pick<HttpRequest, "authentication" | "aut
       authenticationType: "apikey",
       authentication: {
         location: a.in === "query" ? "query" : "header",
-        key: a.value != null ? String(a.value) : undefined,
-        value: a.key != null ? String(a.key) : undefined,
+        // Postman's "key" is the header/parameter name and its "value" is the
+        // secret, matching Yaak's own apikey auth.
+        key: a.key != null ? String(a.key) : undefined,
+        value: a.value != null ? String(a.value) : undefined,
       },
     };
   }
diff --git a/plugins/importer-postman/tests/fixtures/auth.input.json b/plugins/importer-postman/tests/fixtures/auth.input.json
index 5fe9dd96..9f70c3bb 100644
--- a/plugins/importer-postman/tests/fixtures/auth.input.json
+++ b/plugins/importer-postman/tests/fixtures/auth.input.json
@@ -659,12 +659,12 @@
             },
             {
               "key": "value",
-              "value": "value",
+              "value": "secret-123",
               "type": "string"
             },
             {
               "key": "key",
-              "value": "key",
+              "value": "X-API-Key",
               "type": "string"
             }
           ]
diff --git a/plugins/importer-postman/tests/fixtures/auth.output.json b/plugins/importer-postman/tests/fixtures/auth.output.json
index e486060b..1f6d9482 100644
--- a/plugins/importer-postman/tests/fixtures/auth.output.json
+++ b/plugins/importer-postman/tests/fixtures/auth.output.json
@@ -271,8 +271,8 @@
         "authenticationType": "apikey",
         "authentication": {
           "location": "query",
-          "key": "value",
-          "value": "key"
+          "key": "X-API-Key",
+          "value": "secret-123"
         }
       },
       {