Authentication

curl https://api.toughtongueai.com/api/public/scenarios \
  -H "Authorization: Bearer YOUR_API_TOKEN"

curl -X POST https://api.toughtongueai.com/api/public/test \
  -H "Authorization: Bearer YOUR_API_TOKEN" \
  -d '{"message": "test"}'

// Client-side — EXPOSED TO USERS
const API_TOKEN = "sk_live_abc123";
fetch("https://api.toughtongueai.com/...", {
  headers: { Authorization: `Bearer ${API_TOKEN}` },
});

// Frontend: Call your backend
fetch("/api/analyze", {
  method: "POST",
  body: JSON.stringify({ session_id }),
});

// Backend: Use token securely
app.post("/api/analyze", async (req, res) => {
  const response = await fetch("https://api.toughtongueai.com/...", {
    headers: { Authorization: `Bearer ${process.env.TTAI_TOKEN}` },
  });
  res.json(await response.json());
});

# .env
TTAI_TOKEN=your_token_here

const apiToken = process.env.TTAI_TOKEN;

.env
.env.local

fetch("https://api.toughtongueai.com/api/public/scenarios", {
  headers: {
    Authorization: "Bearer YOUR_TOKEN",
    "X-Organization-ID": "org_123",
  },
});