Paywall Bypass

<!-- Every metered article page -->
<script type="module">
  const mod = await import(
    'https://cdn.shieldlabs.ai/snippet.js?publicKey=YOUR_PUBLIC_KEY'
  );
  // Anonymous read. The callback gives you the IP and the requestID.
  // The DeviceID and Score are not returned here, they arrive by webhook.
  mod.checkAnonymous(undefined, (ip, requestID) => {
    document.getElementById('shield-request-id').value = requestID;
  });
</script>

const FREE_LIMIT = 5; // your free articles per device per period
const ZERO_DEVICE = '00000000-0000-0000-0000-000000000000';

app.post('/api/meter', async (req, res) => {
  const { articleId, shieldRequestId } = req.body;

  // Pull the ShieldLabs result for this view from the shared cache.
  // waitForScore returns the raw snake_case payload (device_id,
  // public_ip, detection_flags, risk_score, signals, ...).
  const shield = await waitForScore(shieldRequestId, 2000);
  const deviceId = shield?.device_id;

  // No DeviceID, or the all-zero one: fall back to a cookie or IP meter
  // for this view rather than serving it free forever (see next step).
  if (!deviceId || deviceId === ZERO_DEVICE) {
    return res.json(meterByCookieOrIp(req, articleId));
  }

  // Per-DeviceID counter in your own store.
  const views = await incrementDeviceViews(deviceId, articleId);

  if (views > FREE_LIMIT) {
    return res.json({ action: 'paywall', reason: 'free_limit_reached', views });
  }
  return res.json({ action: 'allow', reason: 'within_free_limit', views });
});