Generate a session token

{
  "jwt": "<created_session_token>"
}

const express = require('express');

const app = express();
app.use(express.json());

// Generate session token for a document.
app.post('/api/create-session', async (req, res) => {
  try {
    const { documentId } = req.body;
    const apiKey = process.env.NUTRIENT_DWS_VIEWER_API_KEY;
    
    if (!documentId) {
      return res.status(400).json({
        success: false,
        error: 'Document ID is required'
      });
    }
    
    // Generate session token.
    const sessionPayload = {
      allowed_documents: [{
        document_id: documentId,
        document_permissions: ['read', 'write', 'download']
      }],
      exp: Math.floor(Date.now() / 1000) + (60 * 60) // 1 hour from now
    };
    
    const sessionResponse = await fetch('https://api.nutrient.io/viewer/sessions', {
      method: 'POST',
      headers: {
        'Content-Type': 'application/json',
        'Authorization': `Bearer ${apiKey}`
      },
      body: JSON.stringify(sessionPayload)
    });
    
    if (!sessionResponse.ok) {
      throw new Error(`Session creation failed: ${sessionResponse.statusText}`);
    }
    
    const sessionResult = await sessionResponse.json();
    
    res.json({
      success: true,
      sessionToken: sessionResult.jwt
    });
    
  } catch (error) {
    console.error('Error:', error);
    res.status(500).json({
      success: false,
      error: error.message
    });
  }
});