Authentication

const CLIENT_ID = process.env.CLIENT_ID!;
const CLIENT_SECRET = process.env.CLIENT_SECRET!;
const TOKEN_ENDPOINT = "https://abyrgverslun.is/api/oauth/token";

async function getAccessToken(): Promise<string> {
  const res = await fetch(TOKEN_ENDPOINT, {
    method: "POST",
    headers: { "Content-Type": "application/x-www-form-urlencoded" },
    body: new URLSearchParams({
      grant_type: "client_credentials",
      client_id: CLIENT_ID,
      client_secret: CLIENT_SECRET,
      scope: "devices:read transactions:read",
    }),
  });

  if (!res.ok) {
    const error = await res.json();
    throw new Error(`Token exchange failed: ${error.error}`);
  }

  const { access_token } = await res.json();
  return access_token;
}

// Usage
const token = await getAccessToken();
const devices = await fetch("https://abyrgverslun.is/api/v1/devices", {
  headers: { Authorization: `Bearer ${token}` },
}).then((r) => r.json());

import os
import requests

CLIENT_ID = os.environ["CLIENT_ID"]
CLIENT_SECRET = os.environ["CLIENT_SECRET"]
TOKEN_ENDPOINT = "https://abyrgverslun.is/api/oauth/token"


def get_access_token() -> str:
    res = requests.post(
        TOKEN_ENDPOINT,
        data={
            "grant_type": "client_credentials",
            "client_id": CLIENT_ID,
            "client_secret": CLIENT_SECRET,
            "scope": "devices:read transactions:read",
        },
    )
    res.raise_for_status()
    return res.json()["access_token"]


# Usage
token = get_access_token()
devices = requests.get(
    "https://abyrgverslun.is/api/v1/devices",
    headers={"Authorization": f"Bearer {token}"},
).json()

var clientId = Environment.GetEnvironmentVariable("CLIENT_ID")!;
var clientSecret = Environment.GetEnvironmentVariable("CLIENT_SECRET")!;
const string TokenEndpoint = "https://abyrgverslun.is/api/oauth/token";

async Task<string> GetAccessTokenAsync()
{
    using var http = new HttpClient();
    var res = await http.PostAsync(TokenEndpoint, new FormUrlEncodedContent(new Dictionary<string, string>
    {
        ["grant_type"] = "client_credentials",
        ["client_id"] = clientId,
        ["client_secret"] = clientSecret,
        ["scope"] = "devices:read transactions:read",
    }));

    res.EnsureSuccessStatusCode();
    var json = await res.Content.ReadFromJsonAsync<JsonElement>();
    return json.GetProperty("access_token").GetString()!;
}

// Usage
var token = await GetAccessTokenAsync();
using var http = new HttpClient();
http.DefaultRequestHeaders.Authorization =
    new System.Net.Http.Headers.AuthenticationHeaderValue("Bearer", token);
var devices = await http.GetFromJsonAsync<JsonElement>(
    "https://abyrgverslun.is/api/v1/devices");