WA Gateway API

curl "https://wa.naogaonit.com/api/send?api_key=YOUR_API_KEY&to=8801712345678&message=Hello%20from%20my%20website"

curl -X POST https://wa.naogaonit.com/api/send \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"to":"8801712345678","message":"Your order #1023 has shipped 🚚"}'

<?php
$ch = curl_init('https://wa.naogaonit.com/api/send');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['x-api-key: YOUR_API_KEY', 'Content-Type: application/json'],
    CURLOPT_POSTFIELDS     => json_encode([
        'to'      => '8801712345678',
        'message' => 'Your order #1023 has shipped 🚚',
    ]),
]);
$response = json_decode(curl_exec($ch), true);
curl_close($ch);

if ($response['ok']) {
    echo 'Queued: ' . $response['message_id'];
} else {
    echo 'Error: ' . $response['error'];
}

<?php
$url = 'https://wa.naogaonit.com/api/send?' . http_build_query([
    'api_key' => 'YOUR_API_KEY',
    'to'      => '8801712345678',
    'message' => 'Hello from PHP',
]);
$response = json_decode(file_get_contents($url), true);

const res = await fetch('https://wa.naogaonit.com/api/send', {
  method: 'POST',
  headers: { 'x-api-key': process.env.WA_API_KEY, 'Content-Type': 'application/json' },
  body: JSON.stringify({ to: '8801712345678', message: 'Hello from Node.js' }),
});
const data = await res.json();
console.log(data.ok ? data.message_id : data.error);

import requests

r = requests.post('https://wa.naogaonit.com/api/send',
    headers={'x-api-key': 'YOUR_API_KEY'},
    json={'to': '8801712345678', 'message': 'Hello from Python'})
print(r.json())

curl -X POST https://wa.naogaonit.com/api/send \
  -H "x-api-key: YOUR_API_KEY" \
  -F "to=8801712345678" \
  -F "caption=Your invoice" \
  -F "file=@invoice-1023.pdf"

<?php
$ch = curl_init('https://wa.naogaonit.com/api/send');
curl_setopt_array($ch, [
    CURLOPT_POST           => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['x-api-key: YOUR_API_KEY'],
    CURLOPT_POSTFIELDS     => [
        'to'      => '8801712345678',
        'caption' => 'Your invoice',
        'file'    => new CURLFile('/path/to/invoice-1023.pdf'),
    ],
]);
$response = json_decode(curl_exec($ch), true);

curl -X POST https://wa.naogaonit.com/api/send \
  -H "x-api-key: YOUR_API_KEY" -H "Content-Type: application/json" \
  -d '{"to":"8801712345678","url":"https://example.com/product.jpg","caption":"New arrival!"}'

curl -X POST https://wa.naogaonit.com/api/send \
  -H "x-api-key: YOUR_API_KEY" -H "Content-Type: application/json" \
  -d '{"to":"8801712345678","base64":"data:image/png;base64,iVBORw0KGgo...","caption":"Logo"}'

curl -X POST https://wa.naogaonit.com/api/send/bulk \
  -H "x-api-key: YOUR_API_KEY" -H "Content-Type: application/json" \
  -d '{"messages":[{"to":"8801712345678","message":"Hi Ali"},{"to":"8801812345678","message":"Hi Sara"}]}'

curl "https://wa.naogaonit.com/api/otp/send?api_key=YOUR_API_KEY&to=8801712345678&purpose=login"

curl -X POST https://wa.naogaonit.com/api/otp/send \
  -H "x-api-key: YOUR_API_KEY" -H "Content-Type: application/json" \
  -d '{"to":"8801712345678","purpose":"register","app":"MyShop"}'

curl "https://wa.naogaonit.com/api/otp/verify?api_key=YOUR_API_KEY&otp_id=otp_Xr8f2LqA0b1c&code=482913"

curl -X POST https://wa.naogaonit.com/api/otp/verify \
  -H "x-api-key: YOUR_API_KEY" -H "Content-Type: application/json" \
  -d '{"otp_id":"otp_Xr8f2LqA0b1c","code":"482913"}'

<?php
session_start();
const WA_URL = 'https://wa.naogaonit.com/api';
const WA_KEY = 'YOUR_API_KEY';

function wa_api(string $path, array $data): array {
    $ch = curl_init(WA_URL . $path);
    curl_setopt_array($ch, [
        CURLOPT_POST => true, CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 20,
        CURLOPT_HTTPHEADER => ['x-api-key: ' . WA_KEY, 'Content-Type: application/json'],
        CURLOPT_POSTFIELDS => json_encode($data),
    ]);
    $res = json_decode(curl_exec($ch) ?: '{}', true);
    curl_close($ch);
    return $res ?: ['ok' => false, 'error' => 'No response'];
}

// STEP 1 – user submitted their phone number
if (isset($_POST['phone'])) {
    $r = wa_api('/otp/send', ['to' => $_POST['phone'], 'purpose' => 'login']);
    if ($r['ok']) {
        $_SESSION['otp_id'] = $r['otp_id'];
        $_SESSION['phone']  = $r['to'];
        echo 'We sent a code to your WhatsApp.';
    } else {
        echo 'Error: ' . htmlspecialchars($r['error']);
    }
}

// STEP 2 – user submitted the code
if (isset($_POST['code'])) {
    $r = wa_api('/otp/verify', ['otp_id' => $_SESSION['otp_id'] ?? '', 'code' => $_POST['code']]);
    if (!empty($r['valid'])) {
        $_SESSION['verified_phone'] = $_SESSION['phone'];
        unset($_SESSION['otp_id']);
        echo 'Verified! ✅';            // create account / log the user in
    } else {
        echo htmlspecialchars($r['message'] ?? $r['error']);
    }
}

use Illuminate\Support\Facades\Http;

// config/services.php: 'wa' => ['url' => env('WA_URL'), 'key' => env('WA_KEY')]
$wa = Http::withHeaders(['x-api-key' => config('services.wa.key')])
          ->baseUrl(config('services.wa.url') . '/api');

// send
$r = $wa->post('/otp/send', ['to' => $request->phone, 'purpose' => 'register'])->json();
session(['otp_id' => $r['otp_id'] ?? null]);

// verify
$r = $wa->post('/otp/verify', ['otp_id' => session('otp_id'), 'code' => $request->code])->json();
if ($r['valid'] ?? false) {
    // phone verified
}

const WA = { url: 'https://wa.naogaonit.com/api', key: process.env.WA_API_KEY };
const wa = (path, body) => fetch(WA.url + path, {
  method: 'POST',
  headers: { 'x-api-key': WA.key, 'Content-Type': 'application/json' },
  body: JSON.stringify(body),
}).then((r) => r.json());

app.post('/login/otp', async (req, res) => {
  const r = await wa('/otp/send', { to: req.body.phone, purpose: 'login' });
  if (!r.ok) return res.status(400).json({ error: r.error });
  req.session.otpId = r.otp_id;
  res.json({ sent: true, expiresIn: r.expires_in });
});

app.post('/login/verify', async (req, res) => {
  const r = await wa('/otp/verify', { otp_id: req.session.otpId, code: req.body.code });
  if (!r.valid) return res.status(401).json({ error: r.message });
  req.session.verified = true;
  res.json({ ok: true });
});

import requests
WA_URL, WA_KEY = 'https://wa.naogaonit.com/api', 'YOUR_API_KEY'

def wa(path, data):
    return requests.post(WA_URL + path, json=data, headers={'x-api-key': WA_KEY}, timeout=20).json()

@app.post('/otp/send')
def otp_send():
    r = wa('/otp/send', {'to': request.form['phone'], 'purpose': 'register'})
    session['otp_id'] = r.get('otp_id')
    return {'sent': r['ok'], 'error': r.get('error')}

@app.post('/otp/verify')
def otp_verify():
    r = wa('/otp/verify', {'otp_id': session.get('otp_id'), 'code': request.form['code']})
    return {'valid': r.get('valid', False), 'message': r.get('message')}

curl -H "x-api-key: YOUR_API_KEY" https://wa.naogaonit.com/api/messages/msg_4Fq0aZ9xYw1b

curl "https://wa.naogaonit.com/api/check?api_key=YOUR_API_KEY&numbers=8801712345678,8801812345678"

curl -X POST https://wa.naogaonit.com/api/groups/add \
  -H "x-api-key: YOUR_API_KEY" -H "Content-Type: application/json" \
  -d '{"group":"120363000000000001@g.us","numbers":["8801712345678","8801812345678"]}'

<?php
$raw = file_get_contents('php://input');
$ok  = hash_equals(hash_hmac('sha256', $raw, 'YOUR_WEBHOOK_SECRET'), $_SERVER['HTTP_X_SIGNATURE'] ?? '');
if (!$ok) { http_response_code(401); exit; }
$event = json_decode($raw, true);

const sig = crypto.createHmac('sha256', SECRET).update(rawBody).digest('hex');
if (!crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(req.get('x-signature') || ''))) return res.sendStatus(401);