Authentication

curl -X POST "https://api-sandbox.88pay.io/api/auth/token" \
  -H "x-api-key: sk_test_a1b2c3d4e5f6g7h8" \
  -H "x-merchant-id: MCH-COL-29ZTP4"

class TokenManager {
  constructor(apiKey, merchantId, baseUrl) {
    this.apiKey = apiKey;
    this.merchantId = merchantId;
    this.baseUrl = baseUrl;
    this.cache = null;
    this.expiresAt = null;
  }
  
  async getToken() {
    // Return cached token if valid
    if (this.cache && Date.now() < this.expiresAt) {
      return this.cache;
    }
    
    // Generate new token
    const response = await fetch(`${this.baseUrl}/api/auth/token`, {
      method: 'POST',
      headers: {
        'x-api-key': this.apiKey,
        'x-merchant-id': this.merchantId
      }
    });
    
    const { data } = await response.json();
    
    // Cache with 50s TTL (10s safety buffer)
    this.cache = data;
    this.expiresAt = Date.now() + 50000;
    
    return data;
  }
  
  async makeRequest(endpoint, options = {}) {
    const { access_token, session_id } = await this.getToken();
    
    return fetch(`${this.baseUrl}${endpoint}`, {
      ...options,
      headers: {
        ...options.headers,
        'Authorization': `Bearer ${access_token}`,
        'x-session-id': session_id,
        'Content-Type': 'application/json'
      }
    });
  }
}

// Usage
const client = new TokenManager(
  process.env.EIGHTY_EIGHT_PAY_API_KEY,
  process.env.EIGHTY_EIGHT_PAY_MERCHANT_ID,
  'https://api-sandbox.88pay.io'
);

// Automatic token management
const payment = await client.makeRequest('/api/transactions/charges', {
  method: 'POST',
  body: JSON.stringify({ /* payment data */ })
});