Authentication

import crypto from 'node:crypto';

export function createCallersToken(agentId, ttlSeconds = 3600) {
  const expiry = Math.floor(Date.now() / 1000) + ttlSeconds;
  const payload = `${agentId}.${expiry}`;
  const signature = crypto
    .createHmac('sha256', process.env.CALLERS_WEB_CALL_SECRET)
    .update(payload)
    .digest('hex');

  return `${payload}.${signature}`;
}

import hashlib
import hmac
import os
import time


def create_callers_token(agent_id: str, ttl_seconds: int = 3600) -> str:
    expiry = int(time.time()) + ttl_seconds
    payload = f"{agent_id}.{expiry}"
    signature = hmac.new(
        os.environ["CALLERS_WEB_CALL_SECRET"].encode(),
        payload.encode(),
        hashlib.sha256,
    ).hexdigest()
    return f"{payload}.{signature}"

// generateToken uses Web Crypto, so it runs in Node.js 18+ and other
// runtimes with crypto.subtle. Tokens it creates are valid for 1 hour.
const { generateToken } = window.CallersWebSdk; // or import from the package
const token = await generateToken('YOUR_AGENT_ID', process.env.CALLERS_WEB_CALL_SECRET);

const { token } = await fetch('/callers-token').then((r) => r.json());
const webCall = new CallersWebSdk.WebCall({ token });

<!-- Render the token into the page on the server -->
<script src="https://cdn.callers.ai/sdk.js" data-token="{{ callers_token }}"></script>