# File: public_htmlapi/satusehat-token.php

Letakkan di folder /lab/api/ yang terpisah dari WordPress

<?php
// Ambil secret dari .env di luar public_html (JANGAN hardcode di file ini jika di-share)
$orgId = getenv('SATUSEHAT_ORG_ID') ?: 'org-id-anda';
$clientId = getenv('SATUSEHAT_CLIENT_ID');
$clientSecret = getenv('SATUSEHAT_CLIENT_SECRET');

$tokenUrl = 'https://api-satusehat.kemkes.go.id/oauth2/v1/accesstoken?grant_type=client_credentials';

$ch = curl_init($tokenUrl);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, "client_id=$clientId&client_secret=$clientSecret");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/x-www-form-urlencoded']);
$response = curl_exec($ch);
curl_close($ch);
header('Content-Type: application/json');
echo $response;

# File .env di /home/username/.env (di LUAR public_html, tidak bisa diakses browser)

SATUSEHAT_ORG_ID=ad754b23-xxxx
SATUSEHAT_CLIENT_ID=uwZhdz...
SATUSEHAT_CLIENT_SECRET=qtQh0vEm...