PRC API Key Request Validate

route.ts

import { NextResponse } from 'next/server'
import { Redis } from '@upstash/redis'
import { supabase } from '@/lib/supabase'
import CryptoJS from 'crypto-js'

const redis = new Redis({
  url: process.env.UPSTASH_REDIS_REST_URL!,
  token: process.env.UPSTASH_REDIS_REST_TOKEN!,
})

const RATE_LIMIT_DURATION = 60 // 1 minute
const MAX_REQUESTS = 30 // maximum requests per minute

const ENCRYPTION_KEY = process.env.ENCRYPTION_KEY || 'your-fallback-secret'

export async function POST(request: Request) {
  try {
    const { apiKey } = await request.json()
    
    if (!apiKey?.trim()) {
      return NextResponse.json(
        { error: 'API key is required' },
        { status: 400 }
      )
    }

    const rateLimitKey = 'prc_api_calls'
    const currentCount = await redis.incr(rateLimitKey)
    
    if (currentCount === 1) {
      await redis.expire(rateLimitKey, RATE_LIMIT_DURATION)
    }
    
    if (currentCount > MAX_REQUESTS) {
      return NextResponse.json(
        { error: 'Rate limit exceeded. Please try again later.' },
        { status: 429 }
      )
    }

    const encryptedApiKey = CryptoJS.AES.encrypt(apiKey, ENCRYPTION_KEY).toString()

    const { data: existingServer, error: dbError } = await supabase
      .from('servers')
      .select('id, name')
      .eq('api_key', encryptedApiKey)
      .maybeSingle()

    if (dbError) {
      console.error('Database error:', dbError)
      return NextResponse.json(
        { error: 'Failed to validate API key' },
        { status: 500 }
      )
    }

    if (existingServer) {
      return NextResponse.json(
        { error: `This API key is already linked to server "${existingServer.name}"` },
        { status: 400 }
      )
    }

    const prcResponse = await fetch('https://api.policeroleplay.community/v1/server', {
      headers: {
        'Server-Key': apiKey
      }
    })

    if (!prcResponse.ok) {
      return NextResponse.json(
        { error: 'Invalid API key' },
        { status: prcResponse.status }
      )
    }

    const prcData = await prcResponse.json()
    
    return NextResponse.json({
      ...prcData,
      encryptedApiKey
    })
  } catch (error) {
    console.error('Validation error:', error)
    return NextResponse.json(
      { error: 'Failed to validate API key' },
      { status: 500 }
    )
  }
}