# Encode client_id:client_secret in Base64
AUTH=$(echo -n "cl_abc123:cs_secret456" | base64)

curl -X POST https://api.ageonce.com/api/oauth/token \
  -H "Content-Type: application/json" \
  -H "Authorization: Basic $AUTH" \
  -d '{
    "grant_type": "authorization_code",
    "code": "auth_code_xyz",
    "redirect_uri": "https://example.com/callback",
    "state": "your_state_value"
  }'

const credentials = Buffer.from(
  `${process.env.AGEONCE_CLIENT_ID}:${process.env.AGEONCE_CLIENT_SECRET}`
).toString('base64');

const response = await fetch('https://api.ageonce.com/api/oauth/token', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Authorization': `Basic ${credentials}`,
  },
  body: JSON.stringify({
    grant_type: 'authorization_code',
    code: authorizationCode,
    redirect_uri: process.env.AGEONCE_REDIRECT_URI,
    state: stateFromCallback,
  }),
});

if (!response.ok) {
  const error = await response.json();
  throw new Error(error.error_description);
}

const { access_token, expires_in, transaction_id } = await response.json();

import os
import base64
import requests

credentials = base64.b64encode(
    f"{os.environ['AGEONCE_CLIENT_ID']}:{os.environ['AGEONCE_CLIENT_SECRET']}".encode()
).decode()

response = requests.post(
    'https://api.ageonce.com/api/oauth/token',
    headers={
        'Content-Type': 'application/json',
        'Authorization': f'Basic {credentials}',
    },
    json={
        'grant_type': 'authorization_code',
        'code': authorization_code,
        'redirect_uri': os.environ['AGEONCE_REDIRECT_URI'],
        'state': state_from_callback,
    }
)

if response.status_code != 200:
    error = response.json()
    raise Exception(error.get('error_description'))

data = response.json()
access_token = data['access_token']
transaction_id = data.get('transaction_id')  # Audit ID for compliance

$credentials = base64_encode(
    getenv('AGEONCE_CLIENT_ID') . ':' . getenv('AGEONCE_CLIENT_SECRET')
);

$response = file_get_contents('https://api.ageonce.com/api/oauth/token', false, stream_context_create([
    'http' => [
        'method' => 'POST',
        'header' => "Content-Type: application/json\r\nAuthorization: Basic " . $credentials,
        'content' => json_encode([
            'grant_type' => 'authorization_code',
            'code' => $authorizationCode,
            'redirect_uri' => getenv('AGEONCE_REDIRECT_URI'),
            'state' => $stateFromCallback,
        ]),
    ],
]));

$data = json_decode($response, true);

if (isset($data['error'])) {
    throw new Exception($data['error_description']);
}

$accessToken = $data['access_token'];
$transactionId = $data['transaction_id'] ?? null;  // Audit ID for compliance