Hi
I am trying to implement complex paywall logic for my website content, and wanted to see if anyone had tips for best practices.
I don't think I could use standard authentication on API calls, because I want to allow non authenticated users to also have access to a specific amount of content per month.
The paywall will operate on a tier basis:
A) Non authenticated users
- will be able to read 4 articles a month. I am planning on using their IP to log how many they read.
B) Authenticated users
- 'lite' users can read more articles, but not all
- paying users can read unlimited
Is it possible to set up a call where user auth token is optional? If they arent authenticated, I'll check IP. If they are authenticated, I'll check their subscription tier?
Is there a better way to do this or any tips?