Dokumentasi API

curl -X POST "https://send.alkhaf.com/api/v1/messages" \
  -H "Authorization: <API_KEY_ANDA>" \
  -H "Accept: application/json" \
  -H "Content-Type: application/json" \
  -d '{
    "session": "nama_sesi_anda",
    "to": "628123456789",
    "message": "Halo dari SENDAL WAGU!"
  }'

<?php
$ch = curl_init('https://send.alkhaf.com/api/v1/messages');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Authorization: <API_KEY_ANDA>',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode([
        'session' => 'nama_sesi_anda',
        'to' => '628123456789',
        'message' => 'Halo dari SENDAL WAGU!',
    ]),
]);
$response = curl_exec($ch);
curl_close($ch);

echo $response;

const res = await fetch('https://send.alkhaf.com/api/v1/messages', {
  method: 'POST',
  headers: {
    Authorization: '<API_KEY_ANDA>',
    Accept: 'application/json',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    session: 'nama_sesi_anda',
    to: '628123456789',
    message: 'Halo dari SENDAL WAGU!',
  }),
});

console.log(res.status, await res.json());

import requests

res = requests.post(
    "https://send.alkhaf.com/api/v1/messages",
    headers={"Authorization": "<API_KEY_ANDA>", "Accept": "application/json"},
    json={
        "session": "nama_sesi_anda",
        "to": "628123456789",
        "message": "Halo dari SENDAL WAGU!",
    },
)
print(res.status_code, res.json())

{
  "message": "Pesan terkirim.",
  "data": { "id": "..." }
}

{
  "id": "0b2f6f5e-7d0e-4d0a-9b3a-6f1d5c1f2a10",
  "event": "message",
  "session": "toko1",
  "timestamp": 1790000000,
  "data": {
    "message_id": "false_628123456789@c.us_3EB0...",
    "chat_id": "628123456789@c.us",
    "phone": "628123456789",
    "from_me": false,
    "text": "Halo, apakah barang ini masih ada?",
    "has_media": false,
    "timestamp": 1790000000
  },
  "payload": { }
}

$body = file_get_contents('php://input');
$ts   = $_SERVER['HTTP_X_SENDAL_TIMESTAMP'] ?? '';
$sig  = $_SERVER['HTTP_X_SENDAL_SIGNATURE'] ?? '';

$expected = 'sha256=' . hash_hmac('sha256', $ts . '.' . $body, 'whsec_SECRET_ANDA');

if (!hash_equals($expected, $sig) || abs(time() - (int) $ts) > 300) {
    http_response_code(401);
    exit;
}

$event = json_decode($body, true);
// proses $event['event'] dan $event['data'] ...
http_response_code(200);

const crypto = require('crypto');

app.post('/webhook', express.raw({ type: 'application/json' }), (req, res) => {
  const ts = req.get('X-Sendal-Timestamp') || '';
  const expected = 'sha256=' + crypto
    .createHmac('sha256', process.env.WEBHOOK_SECRET)
    .update(ts + '.' + req.body.toString())
    .digest('hex');

  const sig = req.get('X-Sendal-Signature') || '';
  const ok = sig.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected));

  if (!ok || Math.abs(Date.now() / 1000 - Number(ts)) > 300) return res.sendStatus(401);

  const event = JSON.parse(req.body.toString());
  // proses event.event dan event.data ...
  res.sendStatus(200);
});