Sandbox and authentication

const HOST = 'https://partners-api.sandbox.securitize.io';
const BASE = `${HOST}/v1`;

let cached = { token: null, expiresAt: 0 };

async function accessToken() {
  if (Date.now() < cached.expiresAt - 60_000) return cached.token;
  const res = await fetch(`${HOST}/oauth2/token`, {
    method: 'POST',
    headers: { 'content-type': 'application/x-www-form-urlencoded' },
    body: new URLSearchParams({
      grant_type: 'client_credentials',
      client_id: process.env.IA_CLIENT_ID,
      client_secret: process.env.IA_CLIENT_SECRET,
    }),
  });
  if (!res.ok) throw new Error(`token: ${res.status}`);
  const { access_token, expires_in } = await res.json();
  cached = { token: access_token, expiresAt: Date.now() + expires_in * 1000 };
  return access_token;
}

const holdings = await fetch(`${BASE}/assets`, {
  headers: { authorization: `Bearer ${await accessToken()}` },
}).then((r) => r.json());
console.log(holdings.data.map((a) => `${a.tokenId} ${a.symbol} ${a.totalTokens}/10^${a.decimals}`));

import os, time, requests

HOST = "https://partners-api.sandbox.securitize.io"
BASE = f"{HOST}/v1"
_cached = {"token": None, "expires_at": 0.0}


def access_token() -> str:
    if time.time() < _cached["expires_at"] - 60:
        return _cached["token"]
    res = requests.post(f"{HOST}/oauth2/token", data={
        "grant_type": "client_credentials",
        "client_id": os.environ["IA_CLIENT_ID"],
        "client_secret": os.environ["IA_CLIENT_SECRET"],
    }, timeout=10)
    res.raise_for_status()
    body = res.json()
    _cached.update(token=body["access_token"], expires_at=time.time() + body["expires_in"])
    return _cached["token"]


holdings = requests.get(f"{BASE}/assets", headers={"Authorization": f"Bearer {access_token()}"}, timeout=10).json()
for a in holdings["data"]:
    print(a["tokenId"], a["symbol"], a["totalTokens"], a["decimals"])