#!/usr/bin/env bash
# Server-to-server call to a CodeB tenant using an API key.
# European Digital Identity Wallet claims are out-of-band; API keys are
# for background jobs.
# [m2m-cookbook 2026-07-23]
#
# Mint the key at https://<CODEB_TENANT_HOST>/api-keys-admin.html
# Keys have the form ak_XXXXXXXXXXXXXXXX and MUST travel over TLS.

set -euo pipefail

TENANT="${CODEB_TENANT:-https://<CODEB_TENANT_HOST>}"
API_KEY="${CODEB_API_KEY:?set CODEB_API_KEY=ak_...}"

curl -sSf \
     -H "Authorization: Bearer ${API_KEY}" \
     "${TENANT}/api.ashx?action=users.list" | jq .