Connect your system to Wamy

curl -X POST https://wamyapp.com/api/v1/send.php \
  -H "Authorization: Bearer $WAMY_KEY" \
  -H "Content-Type: application/json" \
  -d '{"to": {"external_id": "42"},
       "title": "Order confirmed",
       "text": {"ar": "تم تأكيد طلبك رقم *5521*", "en": "Order *5521* is confirmed"},
       "ref": "order-5521-confirmed"}'

<?php
// plain cURL: no library needed (or use WamyClient.php, see the downloads)
$ch = curl_init('https://wamyapp.com/api/v1/send.php');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => ['Authorization: Bearer ' . getenv('WAMY_KEY'), 'Content-Type: application/json'],
    CURLOPT_POSTFIELDS => json_encode([
        'to' => ['external_id' => '42'],
        'title' => 'Order confirmed',
        'text' => ['ar' => 'تم تأكيد طلبك رقم *5521*', 'en' => 'Order *5521* is confirmed'],
        'ref' => 'order-5521-confirmed',
    ], JSON_UNESCAPED_UNICODE),
]);
$result = json_decode(curl_exec($ch), true);

// Node 18+ (fetch is built in)
const res = await fetch("https://wamyapp.com/api/v1/send.php", {
  method: "POST",
  headers: { Authorization: `Bearer ${process.env.WAMY_KEY}`, "Content-Type": "application/json" },
  body: JSON.stringify({
    to: { external_id: "42" },
    title: "Order confirmed",
    text: { ar: "تم تأكيد طلبك رقم *5521*", en: "Order *5521* is confirmed" },
    ref: "order-5521-confirmed",
  }),
});
console.log(await res.json());

import os, requests

r = requests.post(
    "https://wamyapp.com/api/v1/send.php",
    headers={"Authorization": "Bearer " + os.environ["WAMY_KEY"]},
    json={
        "to": {"external_id": "42"},
        "title": "Order confirmed",
        "text": {"ar": "تم تأكيد طلبك رقم *5521*", "en": "Order *5521* is confirmed"},
        "ref": "order-5521-confirmed",
    },
    timeout=10,
)
print(r.status_code, r.json())

curl -X POST https://wamyapp.com/api/v1/link.php \
  -H "Authorization: Bearer $WAMY_KEY" \
  -H "Content-Type: application/json" \
  -d '{"external_id": "42", "email": "customer@example.com", "name": "Salem"}'
# -> {"url": "https://wamyapp.com/link.php?t=...", "expires_at": "..."}

<?php
$ch = curl_init('https://wamyapp.com/api/v1/link.php');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => ['Authorization: Bearer ' . getenv('WAMY_KEY'), 'Content-Type: application/json'],
    CURLOPT_POSTFIELDS => json_encode(['external_id' => (string) $user->id, 'email' => $user->email, 'name' => $user->name]),
]);
$url = json_decode(curl_exec($ch), true)['url'];
header('Location: ' . $url);   // the button "Get notifications on Wamy"

const res = await fetch("https://wamyapp.com/api/v1/link.php", {
  method: "POST",
  headers: { Authorization: `Bearer ${process.env.WAMY_KEY}`, "Content-Type": "application/json" },
  body: JSON.stringify({ external_id: String(user.id), email: user.email, name: user.name }),
});
const { url } = await res.json();
response.redirect(url);   // the button "Get notifications on Wamy"

import os, requests

r = requests.post(
    "https://wamyapp.com/api/v1/link.php",
    headers={"Authorization": "Bearer " + os.environ["WAMY_KEY"]},
    json={"external_id": str(user.id), "email": user.email, "name": user.name},
    timeout=10,
)
url = r.json()["url"]   # open it from the button "Get notifications on Wamy"

curl -X POST https://wamyapp.com/api/v1/send.php \
  -H "Authorization: Bearer $WAMY_KEY" \
  -H "Content-Type: application/json" \
  -d '{"to": {"external_id": "42"},
       "title": "Order confirmed",
       "text": {"ar": "تم تأكيد طلبك رقم *5521*", "en": "Order *5521* is confirmed"},
       "ref": "order-5521-confirmed"}'

<?php
// plain cURL: no library needed (or use WamyClient.php, see the downloads)
$ch = curl_init('https://wamyapp.com/api/v1/send.php');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => ['Authorization: Bearer ' . getenv('WAMY_KEY'), 'Content-Type: application/json'],
    CURLOPT_POSTFIELDS => json_encode([
        'to' => ['external_id' => '42'],
        'title' => 'Order confirmed',
        'text' => ['ar' => 'تم تأكيد طلبك رقم *5521*', 'en' => 'Order *5521* is confirmed'],
        'ref' => 'order-5521-confirmed',
    ], JSON_UNESCAPED_UNICODE),
]);
$result = json_decode(curl_exec($ch), true);

// Node 18+ (fetch is built in)
const res = await fetch("https://wamyapp.com/api/v1/send.php", {
  method: "POST",
  headers: { Authorization: `Bearer ${process.env.WAMY_KEY}`, "Content-Type": "application/json" },
  body: JSON.stringify({
    to: { external_id: "42" },
    title: "Order confirmed",
    text: { ar: "تم تأكيد طلبك رقم *5521*", en: "Order *5521* is confirmed" },
    ref: "order-5521-confirmed",
  }),
});
console.log(await res.json());

import os, requests

r = requests.post(
    "https://wamyapp.com/api/v1/send.php",
    headers={"Authorization": "Bearer " + os.environ["WAMY_KEY"]},
    json={
        "to": {"external_id": "42"},
        "title": "Order confirmed",
        "text": {"ar": "تم تأكيد طلبك رقم *5521*", "en": "Order *5521* is confirmed"},
        "ref": "order-5521-confirmed",
    },
    timeout=10,
)
print(r.status_code, r.json())

<?php
$raw = file_get_contents('php://input');
$ts  = $_SERVER['HTTP_X_WAMY_TIMESTAMP'] ?? '';
$sig = $_SERVER['HTTP_X_WAMY_SIGNATURE'] ?? '';
$mine = 'sha256=' . hash_hmac('sha256', $ts . '.' . $raw, getenv('WAMY_WEBHOOK_SECRET'));
if (!ctype_digit($ts) || abs(time() - (int) $ts) > 300 || !hash_equals($mine, $sig)) { http_response_code(401); exit; }
$event = json_decode($raw, true);   // {"event": "message", "id": 913, "from": {...}, "text": "..."}
http_response_code(204);            // any 2xx = received

import crypto from "node:crypto";

// Express: app.post("/wamy", express.raw({ type: "*/*" }), handler)
function verify(raw, ts, sig, secret) {
  if (!/^\d+$/.test(ts) || Math.abs(Date.now() / 1000 - Number(ts)) > 300) return false;
  const mine = "sha256=" + crypto.createHmac("sha256", secret).update(ts + "." + raw).digest("hex");
  return mine.length === sig.length && crypto.timingSafeEqual(Buffer.from(mine), Buffer.from(sig));
}
// verify(req.body, req.get("X-Wamy-Timestamp"), req.get("X-Wamy-Signature"), process.env.WAMY_WEBHOOK_SECRET)

import hashlib, hmac, time

def verify(raw: bytes, ts: str, sig: str, secret: str) -> bool:
    if not ts.isdigit() or abs(time.time() - int(ts)) > 300:
        return False
    mine = "sha256=" + hmac.new(secret.encode(), ts.encode() + b"." + raw, hashlib.sha256).hexdigest()
    return hmac.compare_digest(mine, sig)

# verify(request.get_data(), request.headers["X-Wamy-Timestamp"], request.headers["X-Wamy-Signature"], SECRET)