Minting session tokens

curl -X POST https://app.useathos.ai/api/external/v1/session \
  -H "Authorization: Bearer $ATHOS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"externalUserId":"rep_8842","externalAgencyId":"agency_chicago"}'

// Your endpoint, e.g. POST /athos/token
app.post('/athos/token', requireAuth, async (req, res) => {
  const r = await fetch('https://app.useathos.ai/api/external/v1/session', {
    method: 'POST',
    headers: {
      Authorization: `Bearer ${process.env.ATHOS_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      externalUserId: req.user.id,          // never trust a client-supplied id
      externalAgencyId: req.user.agencyId,
    }),
  });
  const body = await r.json();
  res.status(r.status).json(body);          // { token, expiresAt } on success
});

# Your endpoint, e.g. POST /athos/token
import os, requests

@app.post("/athos/token")
@require_auth
def athos_token():
    r = requests.post(
        "https://app.useathos.ai/api/external/v1/session",
        headers={"Authorization": f"Bearer {os.environ['ATHOS_API_KEY']}"},
        json={
            "externalUserId": current_user.id,        # never trust a client-supplied id
            "externalAgencyId": current_user.agency_id,
        },
        timeout=10,
    )
    return r.json(), r.status_code   # { "token": ..., "expiresAt": ... }