API Protection for Hono

// Using @holdify/core with Hono
import { Hono } from 'hono';
import { createClient } from '@holdify/core';

const app = new Hono();
const holdify = createClient({
  apiKey: process.env.HOLDIFY_PROJECT_KEY
});

// Middleware for all /api routes
app.use('/api/*', async (c, next) => {
  const key = c.req.header('x-api-key');
  if (!key) {
    return c.json({ error: 'Missing API key' }, 401);
  }

  const result = await holdify.verify(key);
  if (!result.valid) {
    return c.json({ error: 'Invalid API key' }, 401);
  }
  if (result.remaining <= 0) {
    return c.json({ error: 'Rate limit exceeded' }, 429);
  }

  c.set('holdify', result);
  await next();
});

export default app;