Authentication

{
  rateLimit: {
    max: 100,
    window: 60  // seconds
  },
  trustedOrigins: [
    'http://localhost:3000',
    'https://scira.ai',
    'https://www.scira.ai'
  ]
}

fetch('https://scira.ai/api/search', {
  method: 'POST',
  credentials: 'include', // Include cookies
  headers: {
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    messages: [{
      id: 'msg-1',
      role: 'user',
      content: 'What is machine learning?',
      parts: [{ type: 'text', text: 'What is machine learning?' }]
    }],
    model: 'scira-default',
    group: 'research',
    id: 'chat-123'
  })
})

# First, authenticate and save cookies
curl -c cookies.txt \
  -X POST https://scira.ai/api/auth/session \
  -H "Content-Type: application/json"

# Then use the saved cookies for API requests
curl -b cookies.txt \
  -X POST https://scira.ai/api/search \
  -H "Content-Type: application/json" \
  -d '{
    "messages": [{
      "id": "msg-1",
      "role": "user",
      "content": "Explain quantum computing",
      "parts": [{"type": "text", "text": "Explain quantum computing"}]
    }],
    "model": "scira-default",
    "group": "research",
    "id": "chat-456"
  }'

// Rate limiting for unauthenticated users
const identifier = getClientIdentifier(req); // Uses x-forwarded-for or x-real-ip
const { success, limit, reset } = await unauthenticatedRateLimit.limit(identifier);

if (!success) {
  return {
    error: `You've reached the limit of ${limit} searches per day. 
            Sign in for more searches or wait until ${new Date(reset).toLocaleString()}.`
  };
}

Content-Type: application/json
Cookie: better-auth.session_token=<session-token>

x-timezone: America/New_York  // User's timezone for scheduled searches

const session = await auth.api.getSession(req);

if (!session?.user) {
  // Not authenticated
} else {
  // Authenticated - access user info
  console.log(session.user.id);
  console.log(session.user.email);
}

// Check for active Polar subscription
const polarActive = subscription.status === 'active' && 
                    new Date(subscription.currentPeriodEnd) > now;

// Check for active Dodo subscription  
const dodoActive = dodoSubscription.status === 'active' &&
                   (!dodoSubscription.currentPeriodEnd || 
                    new Date(dodoSubscription.currentPeriodEnd) > now);

const isProUser = polarActive || dodoActive;

{
  "error": {
    "code": "unauthorized:auth",
    "message": "Authentication required"
  }
}

{
  "error": {
    "code": "unauthorized:model",
    "message": "scira-gpt5 requires authentication"
  }
}

{
  "error": {
    "code": "upgrade_required:model",
    "message": "scira-gpt5 requires a Pro subscription"
  }
}

{
  "error": {
    "code": "forbidden:chat",
    "message": "This chat belongs to another user"
  }
}