Secure server-side proxy

Like API Gateway

One public endpoint, key-authenticated, rate limited, and sanitized. Provider credentials live only in server secrets and are never sent to the browser.

Endpoints

Like API

GET /api/like?uid=3106602059&server_name=BD&key=YOUR_API_KEY
GET /api/public/like?uid=3106602059&server_name=BD&key=YOUR_API_KEY

Status API

GET /api/status/key=YOUR_API_KEY
GET /api/public/status/key=YOUR_API_KEY
GET /api/status?key=YOUR_API_KEY

Use /api/public/... for external integrations — it is guaranteed reachable on the published domain.

Test console

UID

Server name

Your API key

Key management & setup

Three server secrets power this gateway — no code changes needed to rotate them:

UPSTREAM_API_URL — provider base URL (configured)
UPSTREAM_API_KEY — provider credential (server-only)
CUSTOM_API_KEY — the key your customers send

To change the customer-facing key, update CUSTOM_API_KEY in Project Settings → Secrets. The new value takes effect immediately after the next deploy; nothing in this UI or in the source code contains any key.

Limits: 30 requests per minute per key + IP, 15s upstream timeout, generic error messages only.