How do I generate auth token for each session?

• Call the login endpoint with your app_key to obtain a request_token (valid for ~10 minutes).
• Exchange the request_token along with a hash of your app_key and app_secret to receive an auth_token and refresh_token.
• The auth_token is then passed in your API headers for trading requests.