// Run on your server with its usual Basic API-key/secret authorization.
await fetch(`https://scormbox.com/api/v1/courses/${course_id}`, {
  method: "PATCH",
  headers: { Authorization: auth, "Content-Type": "application/json" },
  body: JSON.stringify({ minimum_total_seconds: 90, minimum_page_seconds: 5 })
});