Function GET

web/src/app/api/user/subscription/route.ts:23–94

(req: NextRequest)

import type { NextRequest } from 'next/server'

export async function GET(req: NextRequest) {
  let userId: string | undefined

  // First, try Bearer token authentication (for CLI clients)
  const apiKey = extractApiKeyFromHeader(req)
  if (apiKey) {
    const userIdFromToken = await getUserIdFromSessionToken(apiKey)
    if (userIdFromToken) {
      userId = userIdFromToken
    }
  }

  // Fall back to NextAuth session authentication (for web clients)
  if (!userId) {
    const session = await getServerSession(authOptions)
    userId = session?.user?.id
  }

  if (!userId) {
    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
  }

  // Fetch user preference for always use a-la-carte
  const [subscription, userPrefs] = await Promise.all([
    getActiveSubscription({ userId, logger }),
    db.query.user.findFirst({
      where: eq(schema.user.id, userId),
      columns: { fallback_to_a_la_carte: true },
    }),
  ])

  const fallbackToALaCarte = userPrefs?.fallback_to_a_la_carte ?? false

  if (!subscription || !subscription.tier) {
    const response: NoSubscriptionResponse = { hasSubscription: false, fallbackToALaCarte }
    return NextResponse.json(response)
  }

  const [rateLimit, limits] = await Promise.all([
    checkRateLimit({ userId, subscription, logger }),
    getSubscriptionLimits({ userId, logger, tier: subscription.tier }),
  ])

  const response: ActiveSubscriptionResponse = {
    hasSubscription: true,
    displayName: SUBSCRIPTION_DISPLAY_NAME,
    subscription: {
      id: subscription.stripe_subscription_id,
      status: subscription.status,
      billingPeriodEnd: subscription.billing_period_end.toISOString(),
      cancelAtPeriodEnd: subscription.cancel_at_period_end,
      canceledAt: subscription.canceled_at?.toISOString() ?? null,
      tier: subscription.tier,
      scheduledTier: subscription.scheduled_tier,
    },
    rateLimit: {
      limited: rateLimit.limited,
      reason: rateLimit.reason,