Authentication

ACCESS_TOKEN=$(curl -fsS -X POST "https://accounts.dealroom.co/oauth/token" \
  -H "Content-Type: application/json" \
  -d '{
    "client_id": "YOUR_CLIENT_ID",
    "client_secret": "YOUR_CLIENT_SECRET",
    "audience": "https://api.dealroom.app",
    "grant_type": "client_credentials"
  }' | jq -er '.access_token')

REM Request the token and save the response
curl -sS -X POST "https://accounts.dealroom.co/oauth/token" ^
  -H "Content-Type: application/json" ^
  -d "{\"client_id\": \"YOUR_CLIENT_ID\", \"client_secret\": \"YOUR_CLIENT_SECRET\", \"audience\": \"https://api.dealroom.app\", \"grant_type\": \"client_credentials\"}" > token.json

REM Read the token out of it, then discard the file
for /f "delims=" %A in ('jq -er .access_token token.json') do set ACCESS_TOKEN=%A
del token.json

$body = @{
  client_id     = "YOUR_CLIENT_ID"
  client_secret = "YOUR_CLIENT_SECRET"
  audience      = "https://api.dealroom.app"
  grant_type    = "client_credentials"
} | ConvertTo-Json

$token = Invoke-RestMethod -Method Post `
  -Uri "https://accounts.dealroom.co/oauth/token" `
  -ContentType "application/json" `
  -Body $body

$accessToken = $token.access_token
$token | Select-Object token_type, expires_in

const clientId = process.env.DEALROOM_CLIENT_ID;
const clientSecret = process.env.DEALROOM_CLIENT_SECRET;

if (!clientId || !clientSecret) {
  throw new Error("Set DEALROOM_CLIENT_ID and DEALROOM_CLIENT_SECRET");
}

const tokenResponse = await fetch("https://accounts.dealroom.co/oauth/token", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    client_id: clientId,
    client_secret: clientSecret,
    audience: "https://api.dealroom.app",
    grant_type: "client_credentials",
  }),
});

if (!tokenResponse.ok) throw new Error(await tokenResponse.text());
const token = await tokenResponse.json();
const accessToken = token.access_token;
console.log({ token_type: token.token_type, expires_in: token.expires_in });

import json
import os
from urllib.request import Request, urlopen

request = Request(
    "https://accounts.dealroom.co/oauth/token",
    data=json.dumps(
        {
            "client_id": os.environ["DEALROOM_CLIENT_ID"],
            "client_secret": os.environ["DEALROOM_CLIENT_SECRET"],
            "audience": "https://api.dealroom.app",
            "grant_type": "client_credentials",
        }
    ).encode(),
    headers={"Content-Type": "application/json"},
    method="POST",
)

with urlopen(request) as response:
    token = json.load(response)

access_token = token["access_token"]
print({"token_type": token["token_type"], "expires_in": token["expires_in"]})

const clientId = process.env.DEALROOM_CLIENT_ID;
const clientSecret = process.env.DEALROOM_CLIENT_SECRET;

if (!clientId || !clientSecret) {
  throw new Error("Set DEALROOM_CLIENT_ID and DEALROOM_CLIENT_SECRET");
}

let cached = { token: null, expiresAt: 0 };

async function getToken() {
  // Refresh a minute early so a request never carries a token that dies in flight.
  if (cached.token && Date.now() < cached.expiresAt - 60_000)
    return cached.token;

  const response = await fetch("https://accounts.dealroom.co/oauth/token", {
    method: "POST",
    headers: { "Content-Type": "application/json" },
    body: JSON.stringify({
      client_id: clientId,
      client_secret: clientSecret,
      audience: "https://api.dealroom.app",
      grant_type: "client_credentials",
    }),
  });
  if (!response.ok) throw new Error(await response.text());

  const { access_token, expires_in } = await response.json();
  cached = { token: access_token, expiresAt: Date.now() + expires_in * 1000 };
  return cached.token;
}

export async function dealroomGet(path, params = {}) {
  const url = new URL(path, "https://api.dealroom.app");
  for (const [key, value] of Object.entries(params)) {
    url.searchParams.set(key, String(value));
  }

  const send = async () =>
    fetch(url, {
      headers: {
        Authorization: `Bearer ${await getToken()}`,
        "X-Client-Id": clientId,
        "User-Agent": "my-app/1.0",
      },
    });

  let response = await send();
  if (response.status === 401) {
    // Expired early or revoked. Refresh once; a second 401 means the key is gone.
    cached = { token: null, expiresAt: 0 };
    response = await send();
  }
  if (!response.ok)
    throw new Error(`${response.status} ${await response.text()}`);
  return response.json();
}

// Usage:
// const companies = await dealroomGet("/data/companies", { limit: 10 });

import json
import os
import time
from urllib.error import HTTPError
from urllib.parse import urlencode
from urllib.request import Request, urlopen

CLIENT_ID = os.environ["DEALROOM_CLIENT_ID"]
CLIENT_SECRET = os.environ["DEALROOM_CLIENT_SECRET"]

_cache = {"token": None, "expires_at": 0.0}


def get_token():
    # Refresh a minute early so a request never carries a token that dies in flight.
    if _cache["token"] and time.time() < _cache["expires_at"] - 60:
        return _cache["token"]

    request = Request(
        "https://accounts.dealroom.co/oauth/token",
        data=json.dumps(
            {
                "client_id": CLIENT_ID,
                "client_secret": CLIENT_SECRET,
                "audience": "https://api.dealroom.app",
                "grant_type": "client_credentials",
            }
        ).encode(),
        headers={"Content-Type": "application/json"},
        method="POST",
    )
    with urlopen(request) as response:
        body = json.load(response)

    _cache["token"] = body["access_token"]
    _cache["expires_at"] = time.time() + body["expires_in"]
    return _cache["token"]


def dealroom_get(path, params=None):
    url = "https://api.dealroom.app" + path + ("?" + urlencode(params) if params else "")

    def send():
        request = Request(
            url,
            headers={
                "Authorization": f"Bearer {get_token()}",
                "X-Client-Id": CLIENT_ID,
                "User-Agent": "my-app/1.0",
            },
        )
        with urlopen(request) as response:
            return json.load(response)

    try:
        return send()
    except HTTPError as error:
        if error.code != 401:
            raise
        # Expired early or revoked. Refresh once; a second 401 means the key is gone.
        _cache["token"] = None
        _cache["expires_at"] = 0.0
        return send()


# Usage:
# companies = dealroom_get("/data/companies", {"limit": 10})

curl -fsS "https://api.dealroom.app/data/entities?limit=10&sort=-launch_date" \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "X-Client-Id: YOUR_CLIENT_ID" | jq .

curl -fsS "https://api.dealroom.app/data/entities?limit=10&sort=-launch_date" ^
  -H "Authorization: Bearer %ACCESS_TOKEN%" ^
  -H "X-Client-Id: YOUR_CLIENT_ID" | jq .

$headers = @{
  Authorization = "Bearer $accessToken"
  "X-Client-Id" = "YOUR_CLIENT_ID"
}

Invoke-RestMethod -Uri "https://api.dealroom.app/data/entities?limit=10&sort=-launch_date" -Headers $headers |
  ConvertTo-Json -Depth 10

const apiResponse = await fetch(
  "https://api.dealroom.app/data/entities?limit=10&sort=-launch_date",
  {
    headers: {
      Authorization: `Bearer ${accessToken}`,
      "X-Client-Id": clientId,
    },
  },
);

if (!apiResponse.ok) throw new Error(await apiResponse.text());
console.log(JSON.stringify(await apiResponse.json(), null, 2));

request = Request(
    "https://api.dealroom.app/data/entities?limit=10&sort=-launch_date",
    headers={
        "Authorization": f"Bearer {access_token}",
        "X-Client-Id": os.environ["DEALROOM_CLIENT_ID"],
        # urllib's default User-Agent is blocked at the edge
        "User-Agent": "my-app/1.0",
    },
)

with urlopen(request) as response:
    print(json.dumps(json.load(response), indent=2))