Authentication

curl -X GET "$TF_BASE_URL/v3/session/" \
  -H "x-api-key: $TF_API_KEY"

const res = await fetch(`${process.env.TF_BASE_URL}/v3/session/`, {
  headers: { "x-api-key": process.env.TF_API_KEY! },
});

import requests
requests.get(f"{BASE_URL}/v3/session/", headers={"x-api-key": API_KEY})

# Requires: TF_JWT_SIGNING_SECRET (console: Settings -> API keys),
# TF_FLOW_ID, TF_API_KEY, TF_BASE_URL

base64url() { base64 | tr '+/' '-_' | tr -d '='; }

NOW=$(date +%s)
EXP=$((NOW + 240))  # 4 minutes — stay under the 5-minute ceiling

HEADER='{"alg":"HS256","typ":"JWT"}'
HEADER_B64=$(echo -n "$HEADER" | base64url)

PAYLOAD=$(cat <<JSON
{"jti":"kyc-user-42-$NOW","iat":$NOW,"exp":$EXP,"flow_id":"$TF_FLOW_ID","payload":{"full_name":"Aarav Sharma","email":"[email protected]","phone":"9841000000"},"session_ttl_minutes":30}
JSON
)
PAYLOAD_B64=$(echo -n "$PAYLOAD" | base64url)

SIGNING_INPUT="${HEADER_B64}.${PAYLOAD_B64}"
SIGNATURE=$(echo -n "$SIGNING_INPUT" | openssl dgst -sha256 -hmac "$TF_JWT_SIGNING_SECRET" -binary | base64url)
JWT="${SIGNING_INPUT}.${SIGNATURE}"

curl -s -X POST "$TF_BASE_URL/api/v1/sessions/" \
  -H "Authorization: Bearer $TF_API_KEY" \
  -H "Content-Type: application/json" \
  -d "{\"jwt\": \"$JWT\"}"

import crypto from "node:crypto";

function base64url(input: Buffer | string) {
  return Buffer.from(input)
    .toString("base64")
    .replace(/\+/g, "-")
    .replace(/\//g, "_")
    .replace(/=+$/, "");
}

const now = Math.floor(Date.now() / 1000);
const header = { alg: "HS256", typ: "JWT" };
const payload = {
  jti: `kyc-user-42-${now}`,
  iat: now,
  exp: now + 240, // <= 5 minutes after iat
  flow_id: process.env.TF_FLOW_ID,
  payload: { full_name: "Aarav Sharma", email: "[email protected]" },
  session_ttl_minutes: 30,
};

const signingInput = `${base64url(JSON.stringify(header))}.${base64url(JSON.stringify(payload))}`;
const signature = base64url(
  crypto.createHmac("sha256", process.env.TF_JWT_SIGNING_SECRET!).update(signingInput).digest()
);
const jwt = `${signingInput}.${signature}`;

const res = await fetch(`${process.env.TF_BASE_URL}/api/v1/sessions/`, {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.TF_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({ jwt }),
});
// { ok: true, session_id, url, expires, expires_at, credits_remaining }

import base64, hashlib, hmac, json, os, time
import requests

def base64url(data: bytes) -> str:
    return base64.urlsafe_b64encode(data).rstrip(b"=").decode()

now = int(time.time())
header = {"alg": "HS256", "typ": "JWT"}
payload = {
    "jti": f"kyc-user-42-{now}",
    "iat": now,
    "exp": now + 240,  # <= 5 minutes after iat
    "flow_id": os.environ["TF_FLOW_ID"],
    "payload": {"full_name": "Aarav Sharma", "email": "[email protected]"},
    "session_ttl_minutes": 30,
}

signing_input = ".".join([
    base64url(json.dumps(header, separators=(",", ":")).encode()),
    base64url(json.dumps(payload, separators=(",", ":")).encode()),
])
signature = base64url(
    hmac.new(os.environ["TF_JWT_SIGNING_SECRET"].encode(), signing_input.encode(), hashlib.sha256).digest()
)
jwt = f"{signing_input}.{signature}"

resp = requests.post(
    f"{os.environ['TF_BASE_URL']}/api/v1/sessions/",
    headers={"Authorization": f"Bearer {os.environ['TF_API_KEY']}", "Content-Type": "application/json"},
    json={"jwt": jwt},
    timeout=15,
)
session = resp.json()  # session["url"], session["session_id"]