Integration Guide

const REFEREE_BASE = 'http://localhost:14002';

// ─── Option A: Request a token automatically (recommended) ───────────────────
//
// POST /v1/auth/request triggers the REFEREE desktop consent dialog.
// If the origin is already approved (or pre-set via REFEREE_ALLOWED_ORIGINS),
// the token is returned immediately without user interaction.
// The returned token is persistent — cache it in sessionStorage or memory.

async function requestToken(appName) {
  const res = await fetch(`${REFEREE_BASE}/v1/auth/request`, {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ appName }),
  });

  if (!res.ok) {
    const err = await res.json().catch(() => ({}));
    // 403 HEADLESS_MODE — origin not pre-approved on a headless server.
    // Add it via REFEREE_ALLOWED_ORIGINS env var or POST /v1/origins.
    throw new Error(err.error ?? `Auth failed: ${res.status}`);
  }

  const { token, persistent } = await res.json();
  console.log(`Token ${persistent ? '(saved)' : '(one-time)'}: ${token}`);
  return token;
}

// ─── Option B: Use a known token directly ────────────────────────────────────
//
// If you control the server, set REFEREE_API_TOKEN on startup and
// hardcode or inject the token — no auth request needed.
// Retrieve it from:
//   • Desktop app: Settings → API Token
//   • Headless:    REFEREE_API_TOKEN env var → token is printed on startup
//   • Headless:    POST /v1/auth/rotate-token (generates a new one)

const REFEREE_TOKEN = process.env.REFEREE_API_TOKEN ?? '<your-referee-token>';

// ─── Usage ───────────────────────────────────────────────────────────────────
let token = null;

async function getOrRequestToken() {
  if (token) return token;
  token = await requestToken('MyApp');
  return token;
}

// All authenticated calls pass the token as X-Referee-Token
async function startSession(sourceUrl) {
  const t = await getOrRequestToken();
  const res = await fetch(`${REFEREE_BASE}/v1/stream/start`, {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      'X-Referee-Token': t,
    },
    body: JSON.stringify({ url: sourceUrl, appName: 'MyApp' }),
  });
  return res.json();
}