Function postUsage

web/src/app/api/v1/usage/_post.ts:26–150

(params: {
  req: NextRequest
  getUserInfoFromApiKey: GetUserInfoFromApiKeyFn
  getUserUsageData: GetUserUsageDataFn
  getOrganizationUsageResponse: GetOrganizationUsageResponseFn
  trackEvent: TrackEventFn
  logger: Logger
})

})

export async function postUsage(params: {
  req: NextRequest
  getUserInfoFromApiKey: GetUserInfoFromApiKeyFn
  getUserUsageData: GetUserUsageDataFn
  getOrganizationUsageResponse: GetOrganizationUsageResponseFn
  trackEvent: TrackEventFn
  logger: Logger
}) {
  const {
    req,
    getUserInfoFromApiKey,
    getUserUsageData,
    getOrganizationUsageResponse,
    trackEvent,
    logger,
  } = params

  try {
    let body: unknown
    try {
      body = await req.json()
    } catch (error) {
      return NextResponse.json(
        { message: 'Invalid JSON in request body' },
        { status: 400 },
      )
    }

    const parseResult = usageRequestSchema.safeParse(body)
    if (!parseResult.success) {
      return NextResponse.json(
        { message: 'Invalid request body', issues: parseResult.error.issues },
        { status: 400 },
      )
    }

    const { fingerprintId, authToken: bodyAuthToken, orgId } = parseResult.data

    // Prefer Authorization header, fall back to body authToken for backwards compatibility
    const authToken = extractApiKeyFromHeader(req) ?? bodyAuthToken

    if (!authToken) {
      return NextResponse.json(
        { message: 'Authentication required' },
        { status: 401 },
      )
    }

    const userInfo = await getUserInfoFromApiKey({
      apiKey: authToken,
      fields: ['id'],
      logger,
    })

    if (!userInfo) {
      trackEvent({
        event: AnalyticsEvent.USAGE_API_AUTH_ERROR,
        userId: 'unknown',