Events stream

# The events stream as Server-Sent Events. Needs events:read. -N keeps it open.
# Resume after the last event you handled: add -H "Last-Event-ID: <its id>" (kept 30 days).
curl -N "https://developers.aton-network.org/api/v1/events?types=user.signed_in,consent.revoked" \
  -H "Authorization: Bearer $ATHERON_API_KEY"

// The events stream over a plain WebSocket, with the ws package. The key goes on the upgrade.
import WebSocket from "ws";

export function followEventsOverSocket(apiKey: string, onEvent: (event: { id: string; type: string; data: Record<string, unknown> }) => void): () => void {
  const socket = new WebSocket("wss://developers.aton-network.org/api/v1/events/ws?types=user.signed_in", {
    headers: { authorization: `Bearer ${apiKey}` },
  });
  socket.on("message", (raw) => {
    const frame = JSON.parse(raw.toString()) as { type: string; event?: { id: string; type: string; data: Record<string, unknown> }; error?: string };
    if (frame.type === "event" && frame.event) onEvent(frame.event);
    else if (frame.type === "error") console.error("the events stream ended:", frame.error);
  });
  return () => socket.close(1000);
}

# curl does not speak WebSocket. The same events come as Server-Sent Events: -N keeps the stream open.
# Needs events:read. Each event: id, event (its type) and data (the body a webhook would get).
curl -N "https://developers.aton-network.org/api/v1/events?types=user.signed_in,consent.revoked" \
  -H "Authorization: Bearer $ATHERON_API_KEY"