Quickstart

1// Node.js 22+. Run on your trusted backend. Never log keys or Customer Tokens.2const required = (name) => {3  const value = process.env[name];4  if (!value) throw new Error(`Missing ${name}`);5  return value;6};7const baseUrl = required("INDIANA_BASE_URL");8const projectId = required("INDIANA_PROJECT_ID");9const serverKey = required("INDIANA_SECRET_KEY");10async function post(path, body, credential = serverKey) {11  const response = await fetch(new URL(path, baseUrl), {12    method: "POST", redirect: "error", signal: AbortSignal.timeout(10000),13    headers: {14      Authorization: `Bearer ${credential}`, "Content-Type": "application/json",15      "X-Indiana-Project": projectId, "X-Indiana-Environment": "sandbox",16    },17    body: JSON.stringify(body),18  });19  const result = await response.json();20  if (!response.ok) throw new Error(`${response.status} ${result.error?.code ?? "HTTP_ERROR"} requestId=${result.requestId ?? "unknown"}`);21  return result;22}23// Use an ID verified by your own login system.24const { customer } = await post("/api/v1/customers", {25  externalUserId: required("INDIANA_VERIFIED_USER_ID"),26});27const { customerToken } = await post("/api/v1/customer-sessions", { customerId: customer.id });28const { holdings } = await post("/api/v1/customer-holdings", {}, customerToken);29console.log({ customerId: customer.id, balances: holdings.balances });