Documentation

// Same-origin browser session after signing in.
// Tokens default to a 60-second lifetime and one connection.
// Expiration applies to handshakes only.
// Already connected sockets are not closed when the token expires.
const session = await fetch('/api/auth/session', {
  credentials: 'include'
}).then(r => r.json());
if (!session.authenticated || !session.csrf) {
  throw new Error('Sign in at /api/auth/login first');
}

const response = await fetch('/api/tokens', {
  method: 'POST',
  credentials: 'include',
  headers: {
    'Content-Type': 'application/json',
    'X-CSRF-Token': session.csrf
  },
  body: JSON.stringify({ account: 'YOUR_CREATOR' })
});
if (!response.ok) throw new Error(await response.text());
const { jwtKey, wsUrl } = await response.json();
const url = new URL(wsUrl, window.location.origin);
if (url.protocol === 'https:') url.protocol = 'wss:';
if (url.protocol === 'http:') url.protocol = 'ws:';
url.searchParams.set('jwtKey', jwtKey);
const socket = new WebSocket(url);
socket.onmessage = event => {
  const frame = JSON.parse(event.data);
  for (const { type, data } of frame.messages ?? []) {
    console.log(type, data);
  }
};
socket.onerror = () => console.error('Transport failure');
socket.onclose = event => console.log('Closed', event.code);

{
  "account": "YOUR_CREATOR",
  "webhook": "https://YOUR_SERVER/webhooks/live"
}

# Server-side only. Keep KUBO_API_KEY private.
curl --fail-with-body "$KUBO_ORIGIN/v1/account" \
  -H "Authorization: Bearer $KUBO_API_KEY"

curl --fail-with-body "$KUBO_ORIGIN/v1/alerts" \
  -H "Authorization: Bearer $KUBO_API_KEY"

curl --fail-with-body -X POST "$KUBO_ORIGIN/v1/alerts" \
  -H "Authorization: Bearer $KUBO_API_KEY" \
  -H 'Content-Type: application/json' \
  --data '{"account":"YOUR_CREATOR","webhook":"https://YOUR_SERVER/webhooks/live"}'

curl --fail-with-body -X PATCH "$KUBO_ORIGIN/v1/alerts/$ALERT_ID" \
  -H "Authorization: Bearer $KUBO_API_KEY" \
  -H 'Content-Type: application/json' \
  --data '{"enabled":false}'

curl --fail-with-body -X DELETE "$KUBO_ORIGIN/v1/alerts/$ALERT_ID" \
  -H "Authorization: Bearer $KUBO_API_KEY"