Short-lived access tokens now work in every region
Short-lived access tokens are now minted by POST https://api.smallest.ai/console/v1/auth/token, and one token works in every region: api.smallest.ai, api.india.smallest.ai (Mumbai) and api.us.smallest.ai (Oregon). Before, a token worked only in the region that minted it, so a client routed to another region got 401.
The request body, the 201 response, the 30 to 900 second TTL and the routes a token can call are unchanged. Clients still send the token as Authorization: Bearer <token>, or as the api_key query parameter on WebSocket connections.
What changed
- New mint URL:
POST https://api.smallest.ai/console/v1/auth/token. Send the API key as exactlyAuthorization: Bearer <API key>. - Tokens are valid in every region until they expire.
POST /waves/v1/auth/tokenkeeps working for now, but its tokens stay tied to the region that minted them. Move your server to the new URL; the old endpoint will be retired with advance notice.- Branch on status codes rather than error text. Status codes and error bodies match the old endpoint, but some messages are worded differently.