curl -H "Authorization: ApiKey sk_live_YOUR_API_KEY" \
  https://api.awsready.net/partner/members/alice@example.com/certificates

curl -H "Authorization: ApiKey sk_live_YOUR_API_KEY" \
  "https://api.awsready.net/partner/members/alice%40example.com/certificates"

# Response
{
  "certificates": [
    {
      "examCode": "CLF-C02",
      "examName": "AWS Cloud Practitioner",
      "issuedAt": "2026-03-01T10:00:00Z",
      "expiresAt": "2028-03-01T10:00:00Z",
      "verificationCode": "AWSR-2026-A7X9-CLF02",
      "downloadUrl": "https://…s3-presigned-url…"   // valid 24 hours
    }
  ]
}

<!-- Replace AWSR-2026-A7X9-CLF02 with the member's verificationCode -->
<iframe
  src="https://cert-ready.net/pages/verify?code=AWSR-2026-A7X9-CLF02"
  width="440" height="360"
  style="border:none;border-radius:8px"
  title="CertReady Certificate Verification">
</iframe>

https://cert-ready.net/pages/verify?code=AWSR-2026-A7X9-CLF02

curl -H "Authorization: ApiKey sk_live_YOUR_API_KEY" \
  "https://api.awsready.net/partner/results"

# Response
{
  "Items": [
    {
      "email": "alice@example.com",
      "examCode": "CLF-C02",
      "score": 85,
      "passed": true,
      "completedAt": "2026-03-01T10:00:00Z"
    }
  ],
  "nextToken": "…"   // pass as ?nextToken=… for next page
}

curl -s -X POST \
  -H "Authorization: ApiKey sk_live_YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email":"alice@yourcompany.com","examCode":"SAA-C03","name":"Alice Smith","slotType":"test"}' \
  https://sso.example.cert-ready.net/sso/token

# Response (200 OK)
{
  "ssoToken": "w3K8… (raw token — treat as secret)",
  "expiresIn": 300,
  "launchUrl": "https://cert-ready.net/pages/sso.html?token=w3K8…&exam=SAA-C03"
}

# Failures
# 401 — invalid or inactive API key
# 402 — no active slot batch for this exam / slotType
# 403 — email domain not in ssoAllowedDomains, or target user is blocked
# 400 — unknown examCode, invalid email format

import os, requests

API_KEY = os.environ["CERTREADY_API_KEY"]
BASE_URL = "https://sso.example.cert-ready.net"

def get_exam_launch_url(email: str, exam_code: str, name: str = "", slot_type: str = "test") -> str:
    resp = requests.post(
        f"{BASE_URL}/sso/token",
        headers={"Authorization": f"ApiKey {API_KEY}"},
        json={"email": email, "examCode": exam_code, "name": name, "slotType": slot_type},
        timeout=10,
    )
    resp.raise_for_status()
    return resp.json()["launchUrl"]

# In your view/handler:
launch_url = get_exam_launch_url("alice@yourcompany.com", "SAA-C03", "Alice Smith")
# Redirect the user's browser to launch_url

const BASE_URL = 'https://sso.example.cert-ready.net';

async function getExamLaunchUrl(email, examCode, name = '', slotType = 'test') {
  const res = await fetch(`${BASE_URL}/sso/token`, {
    method: 'POST',
    headers: {
      'Authorization': `ApiKey ${process.env.CERTREADY_API_KEY}`,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({ email, examCode, name, slotType }),
  });
  if (!res.ok) {
    const err = await res.json().catch(() => ({}));
    throw new Error(err.error || `SSO token request failed (${res.status})`);
  }
  const { launchUrl } = await res.json();
  return launchUrl;
}

// In your Express route:
app.get('/start-exam', async (req, res) => {
  const launchUrl = await getExamLaunchUrl(req.user.email, 'SAA-C03', req.user.name);
  res.redirect(launchUrl);
});