Mes clés API

const API_KEY = 'YOUR_API_KEY';

async function zsearch(query) {
  const res = await fetch('BASE_URL/api/v1/search', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'Authorization': `Bearer ${API_KEY}`
    },
    body: JSON.stringify({
      q: query,
      category: 'database',
      limit: 20
    })
  });

  const data = await res.json();
  if (!res.ok || data.ok === false) throw new Error(data.error || 'API error');
  return data.data;
}

// server.js de ton autre site : ne mets jamais la clé en public
app.get('/proxy-zsearch', async (req, res) => {
  const r = await fetch('BASE_URL/api/v1/search', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'Authorization': `Bearer ${process.env.ZSEARCH_API_KEY}`
    },
    body: JSON.stringify({ q: req.query.q, limit: 20 })
  });
  res.status(r.status).json(await r.json());
});