Authentication

curl https://cap.so/api/video/analytics?videoId=123 \
  -H "Authorization: Bearer <your_token>"

headers: {
  authorization: z.string()
}

headers: {
  licensekey: z.string(),
  instanceid: z.string()
}

const protectedContract = c.router(
  {
    submitFeedback: { /* ... */ },
    getUserPlan: { /* ... */ },
    getS3Config: { /* ... */ },
  },
  {
    baseHeaders: z.object({ authorization: z.string() }),
    commonResponses: { 
      401: z.object({ error: z.string().or(z.boolean()) }) 
    },
  }
);

{
  "error": "Unauthorized"
}

{
  "error": true,
  "auth": false
}

{
  "message": "Insufficient permissions"
}

import { getServerSession } from "next-auth/next";
import { authOptions } from "@cap/database/auth/auth-options";

const session = await getServerSession(authOptions);

if (!session) {
  // Not authenticated
}

import { useSession } from "next-auth/react";

const { data: session, status } = useSession();

if (status === "authenticated") {
  // User is logged in
}

POST /api/commercial/activate

{
  "licensekey": "your-license-key",
  "instanceid": "unique-instance-id"
}

{
  "reset": false
}

{
  "message": "License activated",
  "expiryDate": 1735689600,
  "refresh": 86400
}

{
  "licensekey": "your-license-key",
  "instanceid": "unique-instance-id"
}

{
  "reset": false
}

{
  "message": "License activated",
  "expiryDate": 1735689600,
  "refresh": 86400
}

curl -X GET https://cap.so/api/desktop/plan \
  -H "Authorization: Bearer test-token" \
  -H "Content-Type: application/json"

{
  "upgraded": true,
  "stripeSubscriptionStatus": "active"
}

{
  "error": "Unauthorized"
}