React SDK

npm install @rhombussystems/react

yarn add @rhombussystems/react

pnpm add @rhombussystems/react

const express = require("express");
const app = express();
app.use(express.json());

// The exact origin your pages are served from, such as https://app.example.com
const APP_ORIGIN = process.env.APP_ORIGIN;

app.post("/api/federated-token", async (req, res) => {
  // At most 24 hours; 1 hour if the request doesn't say
  const durationSec = Math.min(Number(req.body.durationSec) || 3600, 86400);
  const response = await fetch(
    "https://api2.rhombussystems.com/api/org/generateFederatedSessionToken",
    {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        "x-auth-scheme": "api-token",
        "x-auth-apikey": process.env.RHOMBUS_API_KEY,
      },
      body: JSON.stringify({ durationSec, domain: APP_ORIGIN }),
    }
  );
  if (!response.ok) return res.status(502).json({ error: "Could not mint a token" });
  // Return the whole response: the SDK reads expiresAtMs and renews the token before it expires
  res.json(await response.json());
});

from fastapi import FastAPI, Request
import httpx, os

app = FastAPI()

# The exact origin your pages are served from, such as https://app.example.com
APP_ORIGIN = os.environ["APP_ORIGIN"]

@app.post("/api/federated-token")
async def federated_token(request: Request):
    body = await request.json()
    # At most 24 hours; 1 hour if the request doesn't say
    duration_sec = min(int(body.get("durationSec") or 3600), 86400)
    async with httpx.AsyncClient() as client:
        response = await client.post(
            "https://api2.rhombussystems.com/api/org/generateFederatedSessionToken",
            headers={
                "Content-Type": "application/json",
                "x-auth-scheme": "api-token",
                "x-auth-apikey": os.environ["RHOMBUS_API_KEY"],
            },
            json={"durationSec": duration_sec, "domain": APP_ORIGIN},
        )
    response.raise_for_status()
    # Return the whole response: the SDK reads expiresAtMs and renews the token before it expires
    return response.json()

// app/api/federated-token/route.ts
import { NextResponse } from "next/server";

// The exact origin your pages are served from, such as https://app.example.com
const APP_ORIGIN = process.env.APP_ORIGIN!;

export async function POST(request: Request) {
  const body = await request.json();
  // At most 24 hours; 1 hour if the request doesn't say
  const durationSec = Math.min(Number(body.durationSec) || 3600, 86400);
  const response = await fetch(
    "https://api2.rhombussystems.com/api/org/generateFederatedSessionToken",
    {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        "x-auth-scheme": "api-token",
        "x-auth-apikey": process.env.RHOMBUS_API_KEY!,
      },
      body: JSON.stringify({ durationSec, domain: APP_ORIGIN }),
    }
  );
  if (!response.ok) return NextResponse.json({ error: "Could not mint a token" }, { status: 502 });
  // Return the whole response: the SDK reads expiresAtMs and renews the token before it expires
  return NextResponse.json(await response.json());
}