Guia rápido (15 minutos)

curl -X POST "https://api.astorya.com.br/partner/v1/sessions" \
  -u "$ASTORYA_CLIENT_ID:$ASTORYA_CLIENT_SECRET" \
  -H "Content-Type: application/json" \
  -d '{
    "externalUserId": "usuario-10293",
    "email": "maria@exemplo.com.br",
    "name": "Maria Souza"
  }'

// Node 18+ (fetch nativo). Rode no SEU servidor, nunca no app.
const ASTORYA_API = 'https://api.astorya.com.br';
const basicAuth = Buffer.from(
  `${process.env.ASTORYA_CLIENT_ID}:${process.env.ASTORYA_CLIENT_SECRET}`,
).toString('base64');

export async function createAstoryaSession(member) {
  const res = await fetch(`${ASTORYA_API}/partner/v1/sessions`, {
    method: 'POST',
    headers: {
      Authorization: `Basic ${basicAuth}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      externalUserId: String(member.id),
      email: member.email,
      name: member.name,
    }),
  });

  if (!res.ok) {
    const error = await res.json().catch(() => ({}));
    throw new Error(`Astorya respondeu ${res.status}: ${error.code ?? res.statusText}`);
  }
  return res.json(); // { launchUrl, launchToken, expiresAt, user }
}

# Python 3 + requests. Rode no SEU servidor, nunca no app.
import os

import requests

ASTORYA_API = "https://api.astorya.com.br"


def create_astorya_session(member: dict) -> dict:
    payload = {
        "externalUserId": str(member["id"]),
        "email": member.get("email"),
        "name": member.get("name"),
    }
    response = requests.post(
        f"{ASTORYA_API}/partner/v1/sessions",
        auth=(os.environ["ASTORYA_CLIENT_ID"], os.environ["ASTORYA_CLIENT_SECRET"]),
        json={k: v for k, v in payload.items() if v is not None},
        timeout=10,
    )
    response.raise_for_status()
    return response.json()  # launchUrl, launchToken, expiresAt, user

<?php
// PHP 8 + ext-curl. Rode no SEU servidor, nunca no app.
function createAstoryaSession(array $member): array
{
    $payload = array_filter([
        'externalUserId' => (string) $member['id'],
        'email' => $member['email'] ?? null,
        'name' => $member['name'] ?? null,
    ], fn ($value) => $value !== null);

    $ch = curl_init('https://api.astorya.com.br/partner/v1/sessions');
    curl_setopt_array($ch, [
        CURLOPT_POST => true,
        CURLOPT_USERPWD => getenv('ASTORYA_CLIENT_ID') . ':' . getenv('ASTORYA_CLIENT_SECRET'),
        CURLOPT_HTTPHEADER => ['Content-Type: application/json'],
        CURLOPT_POSTFIELDS => json_encode($payload),
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT => 10,
    ]);
    $body = curl_exec($ch);
    $status = curl_getinfo($ch, CURLINFO_RESPONSE_CODE);
    curl_close($ch);

    if ($body === false || $status !== 201) {
        throw new RuntimeException("Astorya respondeu HTTP $status: $body");
    }
    return json_decode($body, true); // launchUrl, launchToken, expiresAt, user
}