Production API uses async jobs.

curl https://audio.niumedia-ai.com/v1/audio/uploads \
  -H "Authorization: Bearer $ORPHEUS_KEY" \
  -H "Content-Type: application/json" \
  -d '{"file_name":"meeting.mp3","mime_type":"audio/mpeg","size_bytes":52428800}'

curl $UPLOAD_URL \
  -X PUT \
  -H "Content-Type: audio/mpeg" \
  --data-binary @meeting.mp3

# Complete the upload session, then create the job.
curl https://audio.niumedia-ai.com/v1/audio/uploads/$UPLOAD_ID/complete \
  -H "Authorization: Bearer $ORPHEUS_KEY" \
  -X POST

curl https://audio.niumedia-ai.com/v1/audio/jobs \
  -H "Authorization: Bearer $ORPHEUS_KEY" \
  -H "Content-Type: application/json" \
  -d '{"upload_id":"$UPLOAD_ID","task":"transcribe","callback_url":"https://your-app.com/webhook"}'

import crypto from 'node:crypto'

export function verify(rawBody: string, sigHeader: string, secret: string) {
  const parts = Object.fromEntries(sigHeader.split(',').map((p) => p.split('=', 2)))
  const timestamp = parseInt(parts.t, 10)
  if (Math.abs(Date.now() / 1000 - timestamp) > 300) throw new Error('timestamp too old')
  const expected = crypto.createHmac('sha256', secret).update(`${timestamp}.${rawBody}`).digest('hex')
  if (!crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(parts.v1))) throw new Error('bad signature')
}