(req: NextRequest)
| 16 | } |
| 17 | |
| 18 | function isAuthorized(req: NextRequest): boolean { |
| 19 | if (!ADMIN_KEY) return false; |
| 20 | const header = req.headers.get("authorization"); |
| 21 | if (!header) return false; |
| 22 | const [scheme, token] = header.split(" ", 2); |
| 23 | return scheme === "Bearer" && token === ADMIN_KEY; |
| 24 | } |
| 25 | |
| 26 | // --------------------------------------------------------------------------- |
| 27 | // Rate Limiting (in-memory fixed-window counter) |