ডেভেলপারদের জন্য এসএমএস এপিআই

curl https://sms-api.bitcommerz.com/v1/messages \
  -H "Authorization: Bearer $BITSMS_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: order-5521-shipped" \
  -d '{"to": "01712345678", "text": "Your order #5521 has shipped."}'

// Node.js 18+ (built-in fetch)
const res = await fetch("https://sms-api.bitcommerz.com/v1/messages", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.BITSMS_API_KEY}`,
    "Content-Type": "application/json",
    // Same key on a retry = no duplicate SMS, no double charge.
    "Idempotency-Key": "order-5521-shipped",
  },
  body: JSON.stringify({ to: "01712345678", text: "Your order #5521 has shipped." }),
});
const msg = await res.json();
console.log(res.status, msg.id, msg.status); // 202 "0192…" "queued"

<?php
$ch = curl_init("https://sms-api.bitcommerz.com/v1/messages");
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer " . getenv("BITSMS_API_KEY"),
        "Content-Type: application/json",
        "Idempotency-Key: order-5521-shipped",
    ],
    CURLOPT_POSTFIELDS => json_encode([
        "to" => "01712345678",
        "text" => "আপনার অর্ডার #5521 পাঠানো হয়েছে।",
    ]),
]);
$body = json_decode(curl_exec($ch), true);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE); // 202
echo $body["id"], " ", $body["parts"], " part(s)\n";

import os, requests

res = requests.post(
    "https://sms-api.bitcommerz.com/v1/messages",
    headers={
        "Authorization": f"Bearer {os.environ['BITSMS_API_KEY']}",
        "Idempotency-Key": "order-5521-shipped",
    },
    json={"to": "01712345678", "text": "Your order #5521 has shipped."},
    timeout=10,
)
msg = res.json()
print(res.status_code, msg["id"], msg["status"])  # 202 ... queued

body, _ := json.Marshal(map[string]string{
	"to":   "01712345678",
	"text": "Your order #5521 has shipped.",
})
req, _ := http.NewRequest("POST", "https://sms-api.bitcommerz.com/v1/messages", bytes.NewReader(body))
req.Header.Set("Authorization", "Bearer "+os.Getenv("BITSMS_API_KEY"))
req.Header.Set("Content-Type", "application/json")
req.Header.Set("Idempotency-Key", "order-5521-shipped")

res, err := http.DefaultClient.Do(req)
if err != nil {
	log.Fatal(err) // safe to retry with the same Idempotency-Key
}
defer res.Body.Close()
var msg struct{ ID, Status string }
json.NewDecoder(res.Body).Decode(&msg)
fmt.Println(res.StatusCode, msg.ID, msg.Status) // 202 ... queued

# 1. Send: BitSMS generates the code and never returns it.
curl https://sms-api.bitcommerz.com/v1/otp \
  -H "Authorization: Bearer $BITSMS_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: login-7f3a91" \
  -d '{"to": "01712345678", "app_name": "MyShop"}'
# → 202 {"otp_id": "…", "message_id": "…", "expires_at": "…"}

# 2. Verify what the user typed.
curl https://sms-api.bitcommerz.com/v1/otp/$OTP_ID/verify \
  -H "Authorization: Bearer $BITSMS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"code": "482913"}'
# → 200 {"verified": true}

const headers = {
  Authorization: `Bearer ${process.env.BITSMS_API_KEY}`,
  "Content-Type": "application/json",
};

// 1. Send
const sent = await fetch("https://sms-api.bitcommerz.com/v1/otp", {
  method: "POST",
  headers: { ...headers, "Idempotency-Key": `login-${sessionId}` },
  body: JSON.stringify({ to: "01712345678", app_name: "MyShop" }),
}).then((r) => r.json());

// 2. Verify
const result = await fetch(`https://sms-api.bitcommerz.com/v1/otp/${sent.otp_id}/verify`, {
  method: "POST",
  headers,
  body: JSON.stringify({ code: userInput }),
}).then((r) => r.json());
if (result.verified) { /* sign the user in */ }

<?php
function bitsms(string $path, array $body, array $extra = []): array {
    $ch = curl_init("https://sms-api.bitcommerz.com/v1" . $path);
    curl_setopt_array($ch, [
        CURLOPT_POST => true,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER => array_merge([
            "Authorization: Bearer " . getenv("BITSMS_API_KEY"),
            "Content-Type: application/json",
        ], $extra),
        CURLOPT_POSTFIELDS => json_encode($body),
    ]);
    return json_decode(curl_exec($ch), true);
}

$otp = bitsms("/otp", ["to" => "01712345678", "app_name" => "MyShop"],
              ["Idempotency-Key: login-" . session_id()]);
$check = bitsms("/otp/" . $otp["otp_id"] . "/verify", ["code" => $_POST["code"]]);
if ($check["verified"] ?? false) { /* sign the user in */ }

auth = {"Authorization": f"Bearer {os.environ['BITSMS_API_KEY']}"}

otp = requests.post(
    "https://sms-api.bitcommerz.com/v1/otp",
    headers={**auth, "Idempotency-Key": f"login-{session_id}"},
    json={"to": "01712345678", "app_name": "MyShop"},
    timeout=10,
).json()

check = requests.post(
    f"https://sms-api.bitcommerz.com/v1/otp/{otp['otp_id']}/verify",
    headers=auth,
    json={"code": user_input},
    timeout=10,
).json()
if check["verified"]:
    ...  # sign the user in

type otp struct {
	OtpID string `json:"otp_id"`
}
var sent otp
post("/v1/otp", "login-"+sessionID, map[string]any{"to": "01712345678", "app_name": "MyShop"}, &sent)

var result struct {
	Verified          bool `json:"verified"`
	AttemptsRemaining int  `json:"attempts_remaining"`
}
post("/v1/otp/"+sent.OtpID+"/verify", "", map[string]any{"code": userInput}, &result)

// post marshals body, sets Authorization (and Idempotency-Key when non-empty),
// sends to https://sms-api.bitcommerz.com and decodes the JSON response into out.