API keys, without the footguns

1// The full secret is in the return value — and only here.
2// Next time you list keys, you'll just get the last 4 characters.
3const key = await user.createApiKey({
4  description: "production · checkout",
5  expiresAt: new Date(Date.now() + 90 * 24 * 60 * 60 * 1000),
6  isPublic: false,
7});
8 
9return Response.json({ secret: key.value });