105 lines
3.2 KiB
TypeScript
105 lines
3.2 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import { z } from 'zod';
|
|
import { auth } from '@/auth';
|
|
import { getEffectiveTier } from '@/lib/entitlements';
|
|
import {
|
|
getAllowedByokProviders,
|
|
isByokProviderAllowed,
|
|
} from '@/lib/byok';
|
|
import {
|
|
upsertUserApiKey,
|
|
toPublicApiKey,
|
|
} from '@/lib/byok';
|
|
import { validateProviderApiKey } from '@/lib/byok/validate-key';
|
|
import { VALID_PROVIDERS, type AiGatewayProvider } from '@/lib/ai/router';
|
|
import { prisma } from '@/lib/prisma';
|
|
|
|
const createSchema = z.object({
|
|
provider: z.string().min(1),
|
|
apiKey: z.string().min(8),
|
|
alias: z.string().max(120).optional(),
|
|
model: z.string().max(120).optional(),
|
|
baseUrl: z.string().max(2000).optional(),
|
|
});
|
|
|
|
import { PROVIDER_MODEL_SUGGESTIONS } from '@/lib/ai/models-list';
|
|
|
|
export async function GET() {
|
|
const session = await auth();
|
|
if (!session?.user?.id) {
|
|
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
|
|
}
|
|
|
|
const keys = await prisma.userAPIKey.findMany({
|
|
where: { userId: session.user.id },
|
|
orderBy: { provider: 'asc' },
|
|
});
|
|
|
|
return NextResponse.json({
|
|
keys: keys.map(toPublicApiKey),
|
|
allowedProviders: getAllowedByokProviders(await getEffectiveTier(session.user.id)),
|
|
providerModels: PROVIDER_MODEL_SUGGESTIONS,
|
|
});
|
|
}
|
|
|
|
export async function POST(req: NextRequest) {
|
|
const session = await auth();
|
|
if (!session?.user?.id) {
|
|
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
|
|
}
|
|
|
|
const tier = await getEffectiveTier(session.user.id);
|
|
if (tier === 'BASIC') {
|
|
return NextResponse.json(
|
|
{ error: 'TIER_LIMITED', message: 'BYOK requires a Pro plan or higher' },
|
|
{ status: 403 },
|
|
);
|
|
}
|
|
|
|
let body: z.infer<typeof createSchema>;
|
|
try {
|
|
body = createSchema.parse(await req.json());
|
|
} catch {
|
|
return NextResponse.json({ error: 'Invalid request body' }, { status: 400 });
|
|
}
|
|
|
|
const provider = body.provider as AiGatewayProvider;
|
|
if (!VALID_PROVIDERS.has(provider)) {
|
|
return NextResponse.json({ error: 'Unknown provider' }, { status: 400 });
|
|
}
|
|
|
|
if (!isByokProviderAllowed(tier, provider)) {
|
|
return NextResponse.json(
|
|
{ error: 'TIER_LIMITED', message: `Provider "${provider}" is not available on your plan` },
|
|
{ status: 403 },
|
|
);
|
|
}
|
|
|
|
const effectiveBaseUrl = (provider === 'custom' || provider === 'custom_openai' || provider === 'custom_anthropic') ? body.baseUrl : undefined;
|
|
const allowsBaseUrl = provider === 'custom' || provider === 'custom_openai' || provider === 'custom_anthropic';
|
|
if (!allowsBaseUrl && body.baseUrl) {
|
|
return NextResponse.json(
|
|
{ error: 'INVALID_REQUEST', message: 'baseUrl is only allowed for custom providers' },
|
|
{ status: 400 },
|
|
);
|
|
}
|
|
|
|
try {
|
|
await validateProviderApiKey(provider, body.apiKey, effectiveBaseUrl);
|
|
} catch (err) {
|
|
const message = err instanceof Error ? err.message : 'Invalid API key';
|
|
return NextResponse.json({ error: 'INVALID_API_KEY', message }, { status: 400 });
|
|
}
|
|
|
|
const row = await upsertUserApiKey({
|
|
userId: session.user.id,
|
|
provider,
|
|
plaintext: body.apiKey,
|
|
alias: body.alias,
|
|
model: body.model,
|
|
baseUrl: effectiveBaseUrl,
|
|
});
|
|
|
|
return NextResponse.json({ key: toPublicApiKey(row) });
|
|
}
|