Key and identity rate limits

import { Unkey } from "@unkey/api";

const unkey = new Unkey({ rootKey: process.env.UNKEY_ROOT_KEY });

export async function handler(request: Request) {
  const header = request.headers.get("authorization") ?? "";
  const key = header.startsWith("Bearer ") ? header.slice("Bearer ".length) : header;
  const { data } = await unkey.keys.verifyKey({ key });

  if (!data.valid && data.code === "RATE_LIMITED") {
    const resetMs = data.ratelimits?.find((limit) => limit.exceeded)?.reset ?? Date.now();
    const retryAfter = Math.max(1, Math.ceil((resetMs - Date.now()) / 1000));
    return new Response("Too many requests", {
      status: 429,
      headers: { "Retry-After": String(retryAfter) },
    });
  }

  if (!data.valid && data.code === "USAGE_EXCEEDED") {
    return new Response("Monthly quota exceeded", { status: 429 });
  }

  return data.valid ? new Response("ok") : new Response("Unauthorized", { status: 401 });
}

curl -X POST https://api.unkey.com/v2/keys.createKey \
  -H "Authorization: Bearer $UNKEY_ROOT_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "apiId": "api_...",
    "ratelimits": [
      { "name": "requests", "limit": 100, "duration": 60000, "autoApply": true },
      { "name": "exports", "limit": 5, "duration": 3600000, "autoApply": false }
    ]
  }'

curl -X POST https://api.unkey.com/v2/keys.verifyKey \
  -H "Authorization: Bearer $UNKEY_ROOT_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "key": "sk_live_...",
    "ratelimits": [
      { "name": "exports" },
      { "name": "requests", "cost": 3 }
    ]
  }'

{ "key": "sk_live_...", "ratelimits": [ { "name": "search", "limit": 20, "duration": 10000 } ] }

{
  "meta": { "requestId": "req_..." },
  "data": {
    "valid": false,
    "code": "RATE_LIMITED",
    "keyId": "key_...",
    "ratelimits": [
      { "id": "rl_...", "name": "requests", "limit": 100, "duration": 60000, "remaining": 0, "reset": 1704067260000, "exceeded": true, "autoApply": true }
    ]
  }
}