@nextsparkjs/plugin-social-media-publisher 0.1.0-beta.49 → 0.1.0-beta.51

package/api/social/connect/callback/route.ts

@@ -18,6 +18,7 @@
 
 import { NextRequest, NextResponse } from 'next/server'
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
+import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 import { TokenEncryption } from '@nextsparkjs/core/lib/oauth/encryption'
 import { FacebookAPI } from '../../../../lib/providers/facebook'
 import {
@@ -26,7 +27,7 @@ import {
 } from '../../../../lib/oauth-helper'
 import { mutateWithRLS } from '@nextsparkjs/core/lib/db'
 
-export async function GET(request: NextRequest) {
+const getHandler = async (request: NextRequest) => {
   try {
     // 1. Parse state to extract clientId, platform, and mode
     const { searchParams } = new URL(request.url)
@@ -667,3 +668,5 @@ export async function GET(request: NextRequest) {
     })
   }
 }
+
+export const GET = withRateLimitTier(getHandler, 'read')

package/api/social/connect/route.ts

@@ -7,6 +7,7 @@
 
 import { NextRequest, NextResponse } from 'next/server'
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
+import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 import { TokenEncryption } from '@nextsparkjs/core/lib/oauth/encryption'
 import { FacebookAPI } from '../../../lib/providers/facebook'
 import { ConnectAccountSchema } from '../../../lib/validation'
@@ -18,7 +19,7 @@ import { mutateWithRLS } from '@nextsparkjs/core/lib/db'
  * GET - Initiate OAuth flow
  * Redirects user to Facebook OAuth authorization page
  */
-export async function GET(request: NextRequest) {
+const getHandler = async (request: NextRequest) => {
   try {
     const { searchParams } = new URL(request.url)
     const platform = searchParams.get('platform') || 'instagram_business'
@@ -96,11 +97,13 @@ export async function GET(request: NextRequest) {
   }
 }
 
+export const GET = withRateLimitTier(getHandler, 'read')
+
 /**
  * POST - Handle OAuth callback (deprecated - use /callback endpoint instead)
  * This endpoint receives the authorization code and exchanges it for access token
  */
-export async function POST(request: NextRequest) {
+const postHandler = async (request: NextRequest) => {
   try {
     // 1. Authentication
     const authResult = await authenticateRequest(request)
@@ -325,3 +328,5 @@ export async function POST(request: NextRequest) {
     )
   }
 }
+
+export const POST = withRateLimitTier(postHandler, 'write')

package/api/social/disconnect/route.ts

@@ -7,10 +7,11 @@
 
 import { NextRequest, NextResponse } from 'next/server'
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
+import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 import { DisconnectAccountSchema } from '../../../lib/validation'
 import { queryOneWithRLS, mutateWithRLS } from '@nextsparkjs/core/lib/db'
 
-export async function POST(request: NextRequest) {
+const postHandler = async (request: NextRequest) => {
   try {
     // 1. Authentication
     const authResult = await authenticateRequest(request)
@@ -134,13 +135,15 @@ export async function POST(request: NextRequest) {
   }
 }
 
+export const POST = withRateLimitTier(postHandler, 'write')
+
 /**
  * DELETE method - Alternative endpoint using accountId in URL
  */
-export async function DELETE(
+const deleteHandler = async (
   request: NextRequest,
   { params }: { params: Promise<{ accountId: string }> }
-) {
+) => {
   try {
     // 1. Authentication
     const authResult = await authenticateRequest(request)
@@ -185,3 +188,5 @@ export async function DELETE(
     )
   }
 }
+
+export const DELETE = withRateLimitTier(deleteHandler, 'write')

package/api/social/publish/route.ts

@@ -16,13 +16,14 @@
 
 import { NextRequest, NextResponse } from 'next/server'
 import { authenticateRequest } from '@nextsparkjs/core/lib/api/auth/dual-auth'
+import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 import { TokenEncryption } from '@nextsparkjs/core/lib/oauth/encryption'
 import { FacebookAPI } from '../../../lib/providers/facebook'
 import { InstagramAPI } from '../../../lib/providers/instagram'
 import { PublishPhotoSchema, validateImageUrl, validateCaption, platformRequiresImage } from '../../../lib/validation'
 import { queryOneWithRLS, mutateWithRLS } from '@nextsparkjs/core/lib/db'
 
-export async function POST(request: NextRequest) {
+const postHandler = async (request: NextRequest) => {
   try {
     // 1. Authentication
     const authResult = await authenticateRequest(request)
@@ -302,6 +303,8 @@ export async function POST(request: NextRequest) {
   }
 }
 
+export const POST = withRateLimitTier(postHandler, 'write')
+
 /**
  * Refresh OAuth token for a social media account
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextsparkjs/plugin-social-media-publisher",
-  "version": "0.1.0-beta.49",
+  "version": "0.1.0-beta.51",
   "private": false,
   "main": "./plugin.config.ts",
   "requiredPlugins": [],
@@ -10,7 +10,7 @@
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "zod": "^4.0.0",
-    "@nextsparkjs/core": "0.1.0-beta.49"
+    "@nextsparkjs/core": "0.1.0-beta.51"
   },
   "nextspark": {
     "type": "plugin",