Billing

# sign in once, keep the cookies, then read balance from the same origin
curl -c cookies.txt -s https://api.console.larsa.larsima.com/api/accounts/auth/login \
  -H "Content-Type: application/json" \
  -d '{"email": "you@example.com", "password": "…"}' > /dev/null

curl -b cookies.txt https://api.console.larsa.larsima.com/api/accounts/billing/balance

import requests

session = requests.Session()
session.post("https://api.console.larsa.larsima.com/api/accounts/auth/login",
             json={"email": "you@example.com", "password": "…"}).raise_for_status()

balance = session.get(
    "https://api.console.larsa.larsima.com/api/accounts/billing/balance").json()

// A CookieJar-aware fetch (e.g. `tough-cookie` + `fetch-cookie`) is the practical
// way to do this outside a real browser.
import fetchCookie from "fetch-cookie";
const fetchWithCookies = fetchCookie(fetch);

await fetchWithCookies("https://api.console.larsa.larsima.com/api/accounts/auth/login", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ email: "you@example.com", password: "…" }),
});

const balance = await fetchWithCookies(
  "https://api.console.larsa.larsima.com/api/accounts/billing/balance").then((r) => r.json());

import fetchCookie from "fetch-cookie";
const fetchWithCookies = fetchCookie(fetch);

interface Balance {
  balance: { amount_minor: number; currency: string; display: string };
  blocked: boolean;
}

await fetchWithCookies("https://api.console.larsa.larsima.com/api/accounts/auth/login", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ email: "you@example.com", password: "…" }),
});

const balance: Balance = await fetchWithCookies(
  "https://api.console.larsa.larsima.com/api/accounts/billing/balance").then((r) => r.json());

package main

import (
	"bytes"
	"net/http"
	"net/http/cookiejar"
)

func main() {
	jar, _ := cookiejar.New(nil)
	client := &http.Client{Jar: jar}

	client.Post("https://api.console.larsa.larsima.com/api/accounts/auth/login",
		"application/json",
		bytes.NewReader([]byte(`{"email":"you@example.com","password":"…"}`)))

	resp, _ := client.Get("https://api.console.larsa.larsima.com/api/accounts/billing/balance")
	defer resp.Body.Close()
}

fn main() -> Result<(), Box<dyn std::error::Error>> {
    // reqwest's `cookie_store(true)` keeps the session cookie across calls.
    let client = reqwest::blocking::Client::builder()
        .cookie_store(true)
        .build()?;

    client.post("https://api.console.larsa.larsima.com/api/accounts/auth/login")
        .json(&serde_json::json!({"email": "you@example.com", "password": "…"}))
        .send()?;

    let balance: serde_json::Value = client
        .get("https://api.console.larsa.larsima.com/api/accounts/billing/balance")
        .send()?
        .json()?;
    Ok(())
}

import java.net.URI;
import java.net.http.*;
import java.net.CookieManager;

public class Balance {
    public static void main(String[] args) throws Exception {
        CookieManager cookies = new CookieManager();
        HttpClient client = HttpClient.newBuilder().cookieHandler(cookies).build();

        client.send(HttpRequest.newBuilder()
            .uri(URI.create("https://api.console.larsa.larsima.com/api/accounts/auth/login"))
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString(
                "{\"email\":\"you@example.com\",\"password\":\"…\"}"))
            .build(), HttpResponse.BodyHandlers.discarding());

        HttpResponse<String> resp = client.send(HttpRequest.newBuilder()
            .uri(URI.create("https://api.console.larsa.larsima.com/api/accounts/billing/balance"))
            .build(), HttpResponse.BodyHandlers.ofString());
        System.out.println(resp.body());
    }
}

using System.Net;
using System.Text;

var handler = new HttpClientHandler { CookieContainer = new CookieContainer() };
using var client = new HttpClient(handler);

await client.PostAsync("https://api.console.larsa.larsima.com/api/accounts/auth/login",
    new StringContent("{\"email\":\"you@example.com\",\"password\":\"…\"}",
                      Encoding.UTF8, "application/json"));

var resp = await client.GetAsync(
    "https://api.console.larsa.larsima.com/api/accounts/billing/balance");
Console.WriteLine(await resp.Content.ReadAsStringAsync());

<?php
$cookieFile = tempnam(sys_get_temp_dir(), "larsa");

function larsaRequest(string $url, string $cookieFile, ?array $body = null): string {
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_COOKIEJAR => $cookieFile,
        CURLOPT_COOKIEFILE => $cookieFile,
        CURLOPT_RETURNTRANSFER => true,
    ]);
    if ($body !== null) {
        curl_setopt($ch, CURLOPT_POST, true);
        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($body));
        curl_setopt($ch, CURLOPT_HTTPHEADER, ["Content-Type: application/json"]);
    }
    return curl_exec($ch);
}

larsaRequest("https://api.console.larsa.larsima.com/api/accounts/auth/login", $cookieFile,
    ["email" => "you@example.com", "password" => "…"]);
$balance = larsaRequest(
    "https://api.console.larsa.larsima.com/api/accounts/billing/balance", $cookieFile);

require "net/http"
require "json"
require "uri"

login_uri = URI("https://api.console.larsa.larsima.com/api/accounts/auth/login")
login_req = Net::HTTP::Post.new(login_uri, "Content-Type" => "application/json")
login_req.body = { email: "you@example.com", password: "…" }.to_json
login_res = Net::HTTP.start(login_uri.host, login_uri.port, use_ssl: true) { |h| h.request(login_req) }
cookie = login_res["set-cookie"]

balance_uri = URI("https://api.console.larsa.larsima.com/api/accounts/billing/balance")
balance_req = Net::HTTP::Get.new(balance_uri, "Cookie" => cookie)
balance_res = Net::HTTP.start(balance_uri.host, balance_uri.port, use_ssl: true) { |h| h.request(balance_req) }
balance = JSON.parse(balance_res.body)