WAuto API v1

POST http://www.telmio.it/api/v1/messages/send
Authorization: Bearer wa_xxxx
Content-Type: application/json

{
  "phone": "393312345678",
  "media_url": "https://example.com/promo.jpg",
  "media_type": "image",
  "media_caption": "La nostra offerta speciale!"
}

POST http://www.telmio.it/api/v1/messages/send
Authorization: Bearer wa_xxxx
Content-Type: application/json

{
  "phone": "393312345678",
  "media_base64": "/9j/4AAQSkZJRgABAQAA...",
  "media_mime": "image/jpeg",
  "media_type": "image",
  "media_caption": "La nostra offerta speciale!"
}

// media_base64: contenuto del file codificato in Base64 (max 16 MB)
// media_mime:   MIME type del file (obbligatorio con media_base64)

POST http://www.telmio.it/api/v1/messages/send
Authorization: Bearer wa_xxxx
Content-Type: application/json

{
  "phone": "393312345678",
  "media_url": "https://example.com/catalogo.pdf",
  "media_type": "document",
  "media_filename": "catalogo-2026.pdf",
  "media_caption": "Il nostro catalogo aggiornato"
}

POST http://www.telmio.it/api/v1/messages/send
Authorization: Bearer wa_xxxx
Content-Type: application/json

{
  "phone": "393312345678",
  "media_base64": "JVBERi0xLjQKJ...",
  "media_mime": "application/pdf",
  "media_type": "document",
  "media_filename": "catalogo-2026.pdf",
  "media_caption": "Il nostro catalogo aggiornato"
}

// media_base64: contenuto del file codificato in Base64 (max 16 MB)
// media_mime:   MIME type del file (obbligatorio con media_base64)

curl -X POST 'http://www.telmio.it/api/v1/messages/send' \
  -H 'Authorization: Bearer wa_xxxx' \
  -H 'Content-Type: application/json' \
  -d '{"phone":"393312345678","message":"Ciao!"}'

POST http://www.telmio.it/api/v1/messages/send
Authorization: Bearer wa_xxxx
Content-Type: application/json

{
  "phone": "393312345678",
  "message": "Ciao! Ti contatto per informarti sulla nostra offerta.",
  "force_consent": true
}

curl -X POST 'http://www.telmio.it/api/v1/consent/send' \
  -H 'Authorization: Bearer wa_xxxx' \
  -H 'Content-Type: application/json' \
  -d '{"phone":"393312345678","first_name":"Mario","last_name":"Rossi"}'

import hashlib
import hmac

def is_valid_signature(raw_body: bytes, signature_header: str, secret: str) -> bool:
    expected = 'sha256=' + hmac.new(secret.encode(), raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, signature_header)

# Flask
@app.route('/webhook', methods=['POST'])
def webhook():
    signature = request.headers.get('X-WhatsAuto-Signature', '')
    if not is_valid_signature(request.get_data(), signature, WHATSAUTO_WEBHOOK_SECRET):
        return 'Invalid signature', 401
    message = request.get_json()
    print('Nuovo messaggio:', message)
    return '', 200

<?php
$rawBody = file_get_contents('php://input');
$signatureHeader = $_SERVER['HTTP_X_WHATSAUTO_SIGNATURE'] ?? '';
$secret = getenv('WHATSAUTO_WEBHOOK_SECRET');

$expected = 'sha256=' . hash_hmac('sha256', $rawBody, $secret);
if (!hash_equals($expected, $signatureHeader)) {
    http_response_code(401);
    exit('Invalid signature');
}

$message = json_decode($rawBody, true);
error_log('Nuovo messaggio: ' . print_r($message, true));
http_response_code(200);

import requests

WHATSAUTO_KEY = 'wa_xxxx'
API_BASE = 'http://www.telmio.it/api/v1'

headers = {
    'Authorization': f'Bearer {WHATSAUTO_KEY}',
    'Content-Type': 'application/json'
}

def send_message(phone: str, message: str):
    r = requests.post(f'{API_BASE}/messages/send',
        headers=headers,
        json={'phone': phone, 'message': message})
    r.raise_for_status()
    return r.json()

def send_consent(phone: str, first_name='', last_name=''):
    r = requests.post(f'{API_BASE}/consent/send',
        headers=headers,
        json={'phone': phone, 'first_name': first_name, 'last_name': last_name})
    r.raise_for_status()
    return r.json()

# Uso
print(send_message('393312345678', 'Ciao dal nostro sistema!'))

<?php
define('WHATSAUTO_KEY', 'wa_xxxx');
define('API_BASE', 'http://www.telmio.it/api/v1');

function whatsauto_request(string $endpoint, array $data): array {
    $ch = curl_init(API_BASE . $endpoint);
    curl_setopt_array($ch, [
        CURLOPT_POST => true,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER => [
            'Authorization: Bearer ' . WHATSAUTO_KEY,
            'Content-Type: application/json',
        ],
        CURLOPT_POSTFIELDS => json_encode($data),
    ]);
    $body = curl_exec($ch);
    curl_close($ch);
    return json_decode($body, true);
}

// Invia messaggio
$r = whatsauto_request('/messages/send', [
    'phone'   => '393312345678',
    'message' => 'Ciao dal nostro sistema!',
]);
print_r($r);

// Invia consenso
$r = whatsauto_request('/consent/send', [
    'phone'      => '393312345678',
    'first_name' => 'Mario',
    'last_name'  => 'Rossi',
]);
print_r($r);