Get started

const API = 'https://api.plugchoice.com/sdk/v1';
const VERSION = '2026-10-07';

let token: { value: string; expiresAt: number } | null = null;

export async function plugchoiceToken(): Promise<string> {
  if (token && token.expiresAt > Date.now() + 60_000) return token.value;

  const response = await fetch('https://app.plugchoice.com/oauth/token', {
    method: 'POST',
    body: new URLSearchParams({
      grant_type: 'client_credentials',
      client_id: process.env.PLUGCHOICE_CLIENT_ID!,
      client_secret: process.env.PLUGCHOICE_CLIENT_SECRET!,
    }),
  });
  if (!response.ok) throw new Error(`Plugchoice token: ${response.status}`);

  const body = await response.json();
  token = { value: body.access_token, expiresAt: Date.now() + body.expires_in * 1000 };
  return token.value;
}

export async function plugchoice(path: string, init: RequestInit = {}) {
  return fetch(`${API}${path}`, {
    ...init,
    headers: {
      Authorization: `Bearer ${await plugchoiceToken()}`,
      'Content-Type': 'application/json',
      'Plugchoice-Version': VERSION,
      ...init.headers,
    },
  });
}

import { plugchoice } from './plugchoice';

type LinkAction = { action: string; chargerId?: string; siteId?: string };

// What the client secret may reach: only what this action is about.
function scopeFor(action: LinkAction) {
  if (action.action === 'add') {
    // A site of this user's, or a new site at an address Link asks for.
    return action.siteId ? { sites: [action.siteId] } : { new_site: true };
  }
  if (!action.chargerId) throw new Error(`${action.action} needs a charger`);
  return { chargers: [action.chargerId] };
}

app.post('/plugchoice/client-secret', requireSignedInUser, async (req, res) => {
  const response = await plugchoice('/client-sessions', {
    method: 'POST',
    body: JSON.stringify({
      external_user_id: req.user.id,
      scope: scopeFor(req.body),
      language: req.user.language,
    }),
  });
  if (!response.ok) return res.status(502).json(await response.json());

  const session = await response.json();
  res.json({ clientSecret: session.client_secret });
});

app.post('/plugchoice/link-sessions/:id', requireSignedInUser, async (req, res) => {
  const response = await plugchoice(`/link-sessions/${encodeURIComponent(req.params.id)}`);
  if (!response.ok) return res.sendStatus(404);

  const linkSession = await response.json();
  if (linkSession.external_user_id !== req.user.id) return res.sendStatus(404);

  if (linkSession.status === 'completed') {
    for (const device of linkSession.devices) {
      if (device.type === 'charger') await saveCharger(req.user, device.id);
    }
  }
  res.json({ status: linkSession.status });
});