api-key-sudo-code.java

class ApiKey {
  
  // id will be {prefix}.{hash_of_api_key}
  private String id;
  
  private String name;
  
  private Set<String> scopes;
  
  @JsonProperty("prefix")
  public String getPrefix() {

      if (id == null) return null;

      String[] parts = id.split("\\.");
      return parts.length == 2 ? parts[0] : null;
  }
}

// sudo code 
public void generateApiKey() {
  
  String prefix = randomGenerator(length: 8);
  String key = randomGenerator(length: 35); 
  
  // this will not be stored in database
  String apiKey = prefix+ "." + key;

  // datastore primary key can be like {prefix}.{hash_of_api_key}, 
  // this way no seperate prefix property is required
  String id = prefix + "."+ sha1Hash(apiKey)
}