JWT Authentication

import base64, json, os

raw = os.environ["AIC_SDK_LICENSE"]          # signed "<payload>.<signature>" from the platform
payload = raw.split(".")[0]                  # the first segment is base64-encoded JSON
api_key = json.loads(base64.b64decode(payload))["api_key"]
# payload shape: {"user": "user_...", "version": "2", "api_key": "..."}

import requests

TOKEN_ENDPOINT = "https://api.ai-coustics.io/v1/sdk/tokens"

def mint_token(api_key: str) -> str:
    """Exchange the API key for a short-lived JWT (~1 hour TTL)."""
    response = requests.post(
        TOKEN_ENDPOINT,
        auth=(api_key, ""),  # HTTP Basic: api_key as username, empty password
        timeout=10,
    )
    response.raise_for_status()
    return response.json()["token"]

import aic_sdk as aic

model_path = aic.Model.download("quail-vf-2.1-l-16khz", "./models")
model = aic.Model.from_file(model_path)
config = aic.ProcessorConfig.optimal(model, num_channels=2)

# The JWT goes exactly where a license key would.
processor = aic.Processor(model, mint_token(api_key), config)
processor_context = processor.get_processor_context()

import base64, json, time

REFRESH_MARGIN = 300  # swap the token in 5 minutes before it expires

def token_expiry(token: str) -> int:
    """Read the JWT's `exp` claim (Unix seconds)."""
    payload = token.split(".")[1]                 # the JWT payload segment
    payload += "=" * (-len(payload) % 4)          # restore base64url padding
    return json.loads(base64.urlsafe_b64decode(payload))["exp"]

# Run this on a background thread; each token's own expiry sets the next wait.
while True:
    token = mint_token(api_key)
    processor_context.update_bearer_token(token)
    time.sleep(max(0, token_expiry(token) - time.time() - REFRESH_MARGIN))