Arnaud
eb99faf655
Webhooks, self-serve API keys, and BYOK AI provider keys had zero access gating -- any logged-in user, any tier. Adds users.isDeveloper (boolean, admin-toggled in admin/users/[id] alongside role/tier), checked via a single hasDeveloperAccess() (lib/permissions.ts) so a future subscription-tier auto-grant is a one-line change there, not a redesign across call sites. requireDeveloper() (lib/api-auth.ts) wraps requireSession() with a fresh isDeveloper check (same reasoning as requireAdmin re-querying role: session.user's cookieCache can be up to 5 minutes stale) and replaces requireSession in all 8 gated routes: webhooks CRUD + deliveries + redeliver, api-keys CRUD, ai-keys CRUD. Settings UI: the sidebar hides API Keys/Webhooks nav entries for non-developers; those pages and the BYOK section of Settings -> AI show a locked notice instead of the manager component when accessed directly. Migration grandfathers in anyone who already has a webhook, API key, or BYOK key row -- ships as a new gate on existing features, not a silent lockout of active integrations. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
61 lines
1.8 KiB
TypeScript
61 lines
1.8 KiB
TypeScript
import { NextResponse } from "next/server";
|
|
import { z } from "zod";
|
|
import { db, userAiKeys, eq, and } from "@epicure/db";
|
|
import { requireDeveloper } from "@/lib/api-auth";
|
|
import { encrypt } from "@/lib/encrypt";
|
|
import { applyRateLimit } from "@/lib/rate-limit";
|
|
|
|
const VALID_PROVIDERS = ["openai", "anthropic", "openrouter", "ollama"] as const;
|
|
|
|
const PostSchema = z.object({
|
|
provider: z.enum(VALID_PROVIDERS),
|
|
apiKey: z.string().min(1).max(500),
|
|
});
|
|
|
|
export async function GET() {
|
|
const { session, response } = await requireDeveloper();
|
|
if (response) return response;
|
|
|
|
const keys = await db.query.userAiKeys.findMany({
|
|
where: eq(userAiKeys.userId, session!.user.id),
|
|
columns: { provider: true, createdAt: true },
|
|
});
|
|
|
|
return NextResponse.json({ keys });
|
|
}
|
|
|
|
export async function POST(req: Request) {
|
|
const { session, response } = await requireDeveloper();
|
|
if (response) return response;
|
|
|
|
const limited = await applyRateLimit(`rl:ai-keys:${session!.user.id}`, 5, 3600);
|
|
if (limited) return limited;
|
|
|
|
const body = PostSchema.safeParse(await req.json());
|
|
if (!body.success) return NextResponse.json({ error: "Validation error", issues: body.error.issues }, { status: 400 });
|
|
|
|
const { provider, apiKey } = body.data;
|
|
const userId = session!.user.id;
|
|
|
|
const existing = await db.query.userAiKeys.findFirst({
|
|
where: and(eq(userAiKeys.userId, userId), eq(userAiKeys.provider, provider)),
|
|
});
|
|
|
|
const encryptedKey = encrypt(apiKey);
|
|
|
|
if (existing) {
|
|
await db.update(userAiKeys)
|
|
.set({ encryptedKey })
|
|
.where(and(eq(userAiKeys.userId, userId), eq(userAiKeys.provider, provider)));
|
|
} else {
|
|
await db.insert(userAiKeys).values({
|
|
id: crypto.randomUUID(),
|
|
userId,
|
|
provider,
|
|
encryptedKey,
|
|
});
|
|
}
|
|
|
|
return NextResponse.json({ ok: true });
|
|
}
|