Your data, your systems. One guide for both platforms.

Step 1. Get an access token

Tokens are valid for one hour.

Step 2. Connect

Server: wss://realtime-data.xkcorp.com/realtimeSensorData. Use socket.io-client and pass the token in the auth field.

const axios = require('axios');
const { io } = require('socket.io-client');

async function connectSocket() {
  try {
    const response = await axios.get(
      'https://us-central1-xandar-kardian-production.cloudfunctions.net/api/token/external_auth_token',
      {
        headers: { Authorization: 'your-api-key' },
        params: { email: 'your-email@example.com' }
      }
    );
    const token = response.data.token;

    const socket = io('wss://realtime-data.xkcorp.com/realtimeSensorData', {
      transports: ['websocket'],
      auth: { token }
    });

    socket.on('connect', () => {
      console.log('Socket connected.');
      joinRoom(socket, 'buildingId'); // Replace with your actual buildingId
    });
    socket.on('connect_error', (err) => console.error('Connection Error:', err));
    socket.on('disconnect', (reason) => console.warn('Disconnected:', reason));

    // Receive all events
    socket.onAny((event, data) => console.log(`Received event: ${event}`, data));

    // Receive updates from one sensor
    const serialNumber = 'serialNumber'; // Replace with the actual serial number
    socket.on(serialNumber, (data) => console.log(`Data for ${serialNumber}:`, data));
  } catch (error) {
    console.error('Authentication or Connection failed:', error);
  }
}

function joinRoom(socket, buildingId) {
  socket.emit('joinRoom', buildingId);
}

connectSocket();

Step 3. Join a room

After connecting, subscribe by sending a joinRoom event with your building identifier: { "buildingId": "<your-building-id>" }

Step 4. Receive data

• All events: socket.onAny((event, data) => { ... })
• One sensor: socket.on(serialNumber, callback)

Reconnection and good practice

• The connection can drop during server restarts or network instability. Listen for disconnect and reconnect with exponential backoff or a fixed delay, such as 3 seconds.
• Refresh the token before its one-hour expiry.
• Store API keys and tokens securely and never expose them in client-side code.
• Log connect, message, and disconnect events for monitoring.

Data parameters: Presence_vital (application 41)

Data parameters: SUHO (application 46)