Technical deep-dives, coding wisdom, and engineering stories.

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Support\Facades\Redis;

class DynamicRateLimiter
{
    public function handle($request, Closure $next)
    {
        $user = $request->user();
        $tier = $user->subscription_tier ?? 'free';
        
        $limits = [
            'free' => ['requests' => 100, 'decay' => 3600],
            'pro' => ['requests' => 1000, 'decay' => 3600],
            'enterprise' => ['requests' => 10000, 'decay' => 3600],
        ];
        
        $key = 'rate_limit:' . $user->id . ':' . $tier;
        $current = Redis::incr($key);
        
        if ($current === 1) {
            Redis::expire($key, $limits[$tier]['decay']);
        }
        
        if ($current > $limits[$tier]['requests']) {
            return response()->json([
                'error' => 'Rate limit exceeded',
                'retry_after' => Redis::ttl($key)
            ], 429);
        }
        
        return $next($request);
    }
}