Ojs\ApiBundle\Security\ApiKeyAuthenticator::createToken PHP Method

    public function createToken(Request $request, $providerKey)
    {
        // look for an apikey query parameter
        $apiKey = $request->get('apikey');
        if (!$apiKey) {
            throw new BadCredentialsException('No API key found');
        }
        return new PreAuthenticatedToken('anon.', $apiKey, $providerKey);
    }