44 lines
1.8 KiB
TypeScript
44 lines
1.8 KiB
TypeScript
|
import { NextRequest, NextResponse } from 'next/server';
|
||
|
|
import { generateEphemeralToken } from '@/lib/gemini-live';
|
||
|
|
|
||
|
|
// ─── Rate Limiting ────────────────────────────────────────────────────────────
|
||
|
|
|
||
|
|
const rateLimitMap = new Map<string, number>();
|
||
|
|
const RATE_LIMIT_MS = 60_000; // 1 token per minute per IP
|
||
|
|
|
||
|
|
// ─── Route Handler ────────────────────────────────────────────────────────────
|
||
|
|
|
||
|
|
export async function POST(request: NextRequest) {
|
||
|
|
try {
|
||
|
|
if (!process.env.GEMINI_API_KEY) {
|
||
|
|
return NextResponse.json({ success: false }, { status: 503 });
|
||
|
|
}
|
||
|
|
|
||
|
|
const ip =
|
||
|
|
request.headers.get('x-forwarded-for')?.split(',')[0]?.trim() ??
|
||
|
|
request.headers.get('x-real-ip') ??
|
||
|
|
'unknown';
|
||
|
|
|
||
|
|
const lastRequest = rateLimitMap.get(ip) ?? 0;
|
||
|
|
if (Date.now() - lastRequest < RATE_LIMIT_MS) {
|
||
|
|
return NextResponse.json({ success: false, error: 'Rate limited' }, { status: 429 });
|
||
|
|
}
|
||
|
|
rateLimitMap.set(ip, Date.now());
|
||
|
|
|
||
|
|
const { locale } = (await request.json()) as { locale?: string };
|
||
|
|
const result = await generateEphemeralToken(locale === 'fr' ? 'fr' : 'en');
|
||
|
|
|
||
|
|
return NextResponse.json({
|
||
|
|
success: true,
|
||
|
|
// In production, replace apiKey with an ephemeral token from ai.auth.tokens.create()
|
||
|
|
// to avoid exposing the long-lived API key to the client.
|
||
|
|
apiKey: process.env.GEMINI_API_KEY,
|
||
|
|
model: result.model,
|
||
|
|
config: result.config,
|
||
|
|
});
|
||
|
|
} catch (error) {
|
||
|
|
console.error('[gemini-token] Failed:', error);
|
||
|
|
return NextResponse.json({ success: false }, { status: 500 });
|
||
|
|
}
|
||
|
|
}
|