// JavaScript
import { UserManager } from 'oidc-client-ts';

const BASE_URL = 'https://auth.agglestone.com/tenant/{your-tenant-id}';

const userManager = new UserManager({
  authority: `${BASE_URL}/v2.0/Auth`,
  client_id: '{your-tenant-id}',
  redirect_uri: 'https://yourapp.com/callback',
  response_type: 'code',
  scope: 'openid profile email',
  automaticSilentRenew: true
});

// C# / .NET
using IdentityModel.OidcClient;

var baseUrl = "https://api.agglestone.com/tenant/{your-tenant-id}";

var options = new OidcClientOptions
{
    Authority = $"{baseUrl}/api/Auth",
    ClientId = "{your-tenant-id}",
    RedirectUri = "https://yourapp.com/callback",
    Scope = "openid profile email"
};

var client = new OidcClient(options);

# Python
from authlib.integrations.requests_client import OAuth2Session

client = OAuth2Session(
    client_id='{your-tenant-id}',
    redirect_uri='https://yourapp.com/callback',
    scope='openid profile email'
)

// JavaScript
// Redirect user to login
await userManager.signinRedirect();

// C# / .NET
// Login (opens browser for authentication)
var result = await client.LoginAsync();
var accessToken = result.AccessToken;

# Python
# Get authorization URL and redirect user
auth_url, state = client.authorization_url(
    'https://auth.agglestone.com/tenant/{your-tenant-id}/v2.0/Auth/authorize'
)
# Redirect user to auth_url
print(f"Visit: {auth_url}")

// JavaScript
// On your callback page (e.g., /callback)
const user = await userManager.signinRedirectCallback();
const accessToken = user.access_token;

// C# / .NET
// The LoginAsync() method handles the callback automatically
// Access token is available in result.AccessToken

# Python
# After user authenticates and is redirected back
authorization_response = input("Enter full redirect URL: ")
token = client.fetch_token(
    'https://auth.agglestone.com/tenant/{your-tenant-id}/v2.0/Auth/token',
    authorization_response=authorization_response
)
access_token = token['access_token']

// JavaScript
const user = await userManager.getUser();
  const response = await fetch(
    `${BASE_URL}/api/Users`,
  {
    headers: {
      'Authorization': `Bearer ${user.access_token}`,
      'Content-Type': 'application/json'
    }
  }
);
const data = await response.json();

// C# / .NET
using System.Net.Http;

var httpClient = new HttpClient();
httpClient.DefaultRequestHeaders.Authorization = 
    new System.Net.Http.Headers.AuthenticationHeaderValue("Bearer", accessToken);

var response = await httpClient.GetAsync(
    "https://auth.agglestone.com/tenant/{tenantId}/api/Users"
);
var data = await response.Content.ReadFromJsonAsync<UserResponse>();

# Python
import requests

headers = {
    'Authorization': f'Bearer {access_token}',
    'Content-Type': 'application/json'
}

response = requests.get(
    'https://api.agglestone.com/tenant/{tenantId}/api/Users',
    headers=headers
)
data = response.json()

// JavaScript
const user = await userManager.getUser();
if (user && !user.expired) {
  // User is authenticated
  console.log('User:', user.profile);
} else {
  // User needs to login
  await userManager.signinRedirect();
}

// C# / .NET
var user = await client.GetUserAsync();
if (user != null && !user.IsExpired)
{
    // User is authenticated
    Console.WriteLine($"User: {user.Profile}");
}
else
{
    // User needs to login
    await client.LoginAsync();
}

# Python
user = client.get_user()
if user and not user.is_expired:
    # User is authenticated
    print(f"User: {user.profile}")
else:
    # User needs to login
    auth_url = client.get_authorization_url()
    # Redirect to auth_url

// JavaScript
const BASE_URL = 'https://auth.agglestone.com/tenant/{tenantId}';

async function apiCall(endpoint) {
  const user = await userManager.getUser();
  if (!user || user.expired) {
    await userManager.signinSilent();
    return apiCall(endpoint); // Retry
  }
  
  const response = await fetch(
    `${BASE_URL}${endpoint}`,
    {
      headers: {
        'Authorization': `Bearer ${user.access_token}`
      }
    }
  );
  
  return response.json();
}

// C# / .NET
var baseUrl = "https://api.agglestone.com/tenant/{tenantId}";

public async Task<T> ApiCallAsync<T>(string endpoint)
{
    var user = await client.GetUserAsync();
    if (user == null || user.IsExpired)
    {
        await client.SigninSilentAsync();
        return await ApiCallAsync<T>(endpoint); // Retry
    }
    
    var httpClient = new HttpClient();
    httpClient.DefaultRequestHeaders.Authorization = 
        new System.Net.Http.Headers.AuthenticationHeaderValue("Bearer", user.AccessToken);
    
    var response = await httpClient.GetAsync(
        $"{baseUrl}{endpoint}"
    );
    
    return await response.Content.ReadFromJsonAsync<T>();
}

# Python
BASE_URL = 'https://api.agglestone.com/tenant/{tenant_id}'

async def api_call(endpoint):
    user = client.get_user()
    if not user or user.is_expired:
        await client.signin_silent()
        return await api_call(endpoint)  # Retry
    
    headers = {
        'Authorization': f'Bearer {user.access_token}'
    }
    
    response = requests.get(
        f'{BASE_URL}{endpoint}',
        headers=headers
    )
    
    return response.json()

// JavaScript
await userManager.signoutRedirect();

// C# / .NET
await client.LogoutAsync();

# Python
client.logout()