Quickstart

pip install pyjwt[crypto] requests

from pathlib import Path
import time
import uuid

import jwt
import requests

BASE_URL = "https://app.teampascal.com/api/v1/custom-source"
TOKEN_URL = f"{BASE_URL}/token"
CLIENT_ID = "<tenant_slug>/sales_orders"
KID = "<key_fingerprint from Admin>"
PRIVATE_KEY_PATH = "custom-source.key"


def exchange_token():
    private_key_pem = Path(PRIVATE_KEY_PATH).read_text()
    iat = int(time.time())
    claims = {
        "iss": CLIENT_ID,
        "sub": CLIENT_ID,
        "aud": TOKEN_URL,
        "iat": iat,
        "exp": iat + 300,
        "jti": str(uuid.uuid4()),
    }
    assertion = jwt.encode(
        claims, private_key_pem, algorithm="EdDSA", headers={"kid": KID}
    )
    response = requests.post(
        TOKEN_URL,
        data={
            "grant_type": "client_credentials",
            "client_assertion_type": (
                "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
            ),
            "client_assertion": assertion,
        },
        timeout=30,
    )
    response.raise_for_status()
    return response.json()["access_token"]


TOKEN = exchange_token()