curl --fail-with-body -X POST https://maatstays.wtf/v1/token \
  -H "Authorization: Bearer $MAAT_PARTNER_KEY"

const res = await fetch('https://maatstays.wtf/v1/token', {
    method: 'POST',
    headers: { Authorization: `Bearer ${process.env.MAAT_PARTNER_KEY}` },
});

if (!res.ok) {
    // One indistinguishable 401 covers an unknown key, a revoked key and a
    // wrong secret. Do not branch on it.
    throw new Error(`token exchange failed: ${res.status}`);
}

const { access_token: token, expires_in: expiresIn } = await res.json();
console.log(token.slice(0, 12), expiresIn);

import os

import requests

res = requests.post(
    "https://maatstays.wtf/v1/token",
    headers={"Authorization": f"Bearer {os.environ['MAAT_PARTNER_KEY']}"},
    timeout=30,
)
if res.status_code != 200:
    raise RuntimeError(f"token exchange failed: {res.status_code}")

body = res.json()
print(body["access_token"][:12], body["expires_in"])

package main

import (
    "encoding/json"
    "fmt"
    "log"
    "net/http"
    "os"
)

type token struct {
    AccessToken string `json:"access_token"`
    ExpiresIn   int    `json:"expires_in"`
}

func main() {
    req, _ := http.NewRequest(http.MethodPost, "https://maatstays.wtf/v1/token", nil)
    req.Header.Set("Authorization", "Bearer "+os.Getenv("MAAT_PARTNER_KEY"))

    res, err := http.DefaultClient.Do(req)
    if err != nil {
        log.Fatal(err)
    }
    defer res.Body.Close()

    if res.StatusCode != http.StatusOK {
        log.Fatalf("token exchange failed: %d", res.StatusCode)
    }

    var body token
    if err := json.NewDecoder(res.Body).Decode(&body); err != nil {
        log.Fatal(err)
    }
    fmt.Println(body.AccessToken[:12], body.ExpiresIn)
}

{
  "access_token": "eyJhbGciOiJIUzI1NiIs…",
  "token_type": "Bearer",
  "expires_in": 900,
  "workspace_id": "3f6b0f2e-1c3a-4d5e-9a70-8b2c4d6e0f11",
  "sandbox": true,
  "scope": [
    "partner:token.issue",
    "catalog:read",
    "calendar:read"
  ]
}

{
  "type": "https://developer.maatstays.wtf/errors/unauthorized",
  "title": "Unauthorized",
  "status": 401,
  "detail": "Invalid API key",
  "instance": "urn:maat:request:3b1f7a90-0d4c-4d4e-9b2a-6c1f0a2e5d33",
  "code": "unauthorized"
}

{
  "type": "https://developer.maatstays.wtf/errors/insufficient-scope",
  "title": "Insufficient scope",
  "status": 403,
  "detail": "Insufficient scope",
  "instance": "urn:maat:request:3b1f7a90-0d4c-4d4e-9b2a-6c1f0a2e5d33",
  "code": "insufficient_scope"
}

{
  "type": "https://developer.maatstays.wtf/errors/rate-limited",
  "title": "Too many requests",
  "status": 429,
  "detail": "Too many requests for this API key.",
  "instance": "urn:maat:request:3b1f7a90-0d4c-4d4e-9b2a-6c1f0a2e5d33",
  "code": "rate_limited"
}

{
  "type": "https://developer.maatstays.wtf/errors/internal-error",
  "title": "Internal error",
  "status": 500,
  "detail": "The request could not be completed.",
  "instance": "urn:maat:request:3b1f7a90-0d4c-4d4e-9b2a-6c1f0a2e5d33",
  "code": "internal_error"
}

{
  "type": "https://developer.maatstays.wtf/errors/service-unavailable",
  "title": "Service unavailable",
  "status": 503,
  "detail": "Token issuance is not configured on this platform yet.",
  "instance": "urn:maat:request:3b1f7a90-0d4c-4d4e-9b2a-6c1f0a2e5d33",
  "code": "service_unavailable"
}