The white-label social media API

# 1. One machine-to-machine token covers ALL of your users
curl -X POST https://auth.post-pulse.com/oauth/token \
  -H "Content-Type: application/json" \
  -d '{
    "client_id": "YOUR_CLIENT_ID",
    "client_secret": "YOUR_CLIENT_SECRET",
    "grant_type": "client_credentials",
    "audience": "https://api.post-pulse.com"
  }'

# 2. Provision the end-user once. Idempotent on (client, externalUserId) —
#    safe to re-send. Persist the returned uuid. (No user-id header yet: the
#    user doesn't exist until this call returns.)
curl -X POST https://api.post-pulse.com/v1/connect/users \
  -H "Authorization: Bearer <m2m_token>" \
  -H "x-api-key: YOUR_CLIENT_ID" \
  -H "Content-Type: application/json" \
  -d '{
    "externalUserId": "your_user_42",
    "name": "Jane Doe",
    "email": "[email protected]"
  }'
# → { "uuid": "..." }

# 3. Generate a Connect URL for that user — branded as you.
#    They authorise their own Instagram/TikTok/… on the standard connect step.
curl -X POST https://api.post-pulse.com/v1/connect/authorize-url \
  -H "Authorization: Bearer <m2m_token>" \
  -H "x-api-key: YOUR_CLIENT_ID" \
  -H "X-Connect-External-User-Id: your_user_42" \
  -H "Content-Type: application/json" \
  -d '{ "platform": "INSTAGRAM", "redirectUri": "https://yourapp.com/connected" }'

# 4. Publish on that user's behalf — same API, 9 platforms, one request.
curl -X POST https://api.post-pulse.com/v1/posts \
  -H "Authorization: Bearer <m2m_token>" \
  -H "x-api-key: YOUR_CLIENT_ID" \
  -H "X-Connect-External-User-Id: your_user_42" \
  -H "Content-Type: application/json" \
  -d '{
    "scheduledTime": "2026-06-10T15:00:00Z",
    "publications": [{
      "socialMediaAccountId": 123,
      "platformSettings": { "type": "INSTAGRAM", "publicationType": "REEL" },
      "posts": [{ "content": "Shipped from your product 🚀", "attachmentPaths": ["uuid/reel.mp4"] }]
    }]
  }'