fix(map): complete live Cesium provider path

src/k1link/web/map_api.py

@@ -22,6 +22,7 @@ ALLOWED_ION_ASSET_IDS: Final = frozenset({1, 2, 96188})
 SAFE_ERROR_CODE = re.compile(r"^[a-z][a-z0-9_]{0,95}$")
 MAX_JSON_RESPONSE_BYTES: Final = 1024 * 1024
 MAX_CACHE_TARGET_LENGTH: Final = 8192
+BING_GATEWAY_KEY_MARKER: Final = "nodedc-gateway"
 
 REQUEST_HEADER_ALLOWLIST: Final = frozenset(
     {
@@ -325,7 +326,11 @@ def _validate_cache_target(target_url: str) -> None:
         )
     if any(
         key.lower() in CREDENTIAL_QUERY_KEYS
-        for key, _ in parse_qsl(parsed.query, keep_blank_values=True)
+        and not (
+            key.lower() == "key"
+            and value == BING_GATEWAY_KEY_MARKER
+        )
+        for key, value in parse_qsl(parsed.query, keep_blank_values=True)
     ):
         raise HTTPException(
             status_code=422,