Developer quickstart

curl "$OMNI_API_URL/messages" \
  -H "Authorization: Bearer $OMNI_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: order-1042-shipped" \
  -d '{
    "to": "+919812345678",
    "reference": "order-1042",
    "content": {
      "sms": { "text": "Your order 1042 has shipped." }
    }
  }'

import os
import requests

response = requests.post(
    f"{os.environ['OMNI_API_URL']}/messages",
    headers={
        "Authorization": f"Bearer {os.environ['OMNI_API_KEY']}",
        "Idempotency-Key": "order-1042-shipped",
    },
    json={
        "to": "+919812345678",
        "reference": "order-1042",
        "content": {"sms": {"text": "Your order 1042 has shipped."}},
    },
    timeout=30,
)
response.raise_for_status()
message = response.json()
print(message["id"], message["status"])

const response = await fetch(`${process.env.OMNI_API_URL}/messages`, {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.OMNI_API_KEY}`,
    "Content-Type": "application/json",
    "Idempotency-Key": "order-1042-shipped",
  },
  body: JSON.stringify({
    to: "+919812345678",
    reference: "order-1042",
    content: { sms: { text: "Your order 1042 has shipped." } },
  }),
});
if (!response.ok) throw new Error(JSON.stringify(await response.json()));
const message = await response.json();
console.log(message.id, message.status);

import hashlib
import hmac
import time

def verify(raw_body: bytes, header: str, secret: str, tolerance: int = 300) -> bool:
    parts = dict(item.split("=", 1) for item in header.split(","))
    timestamp, signature = parts.get("t", ""), parts.get("v1", "")
    if not timestamp.isdigit() or abs(time.time() - int(timestamp)) > tolerance:
        return False
    expected = hmac.new(
        secret.encode(), f"{timestamp}.".encode() + raw_body, hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, signature)

import crypto from "node:crypto";

export function verify(rawBody, header, secret, tolerance = 300) {
  const parts = Object.fromEntries(header.split(",").map((item) => item.split("=", 2)));
  const timestamp = Number(parts.t);
  if (!timestamp || Math.abs(Date.now() / 1000 - timestamp) > tolerance) return false;
  const expected = crypto
    .createHmac("sha256", secret)
    .update(`${parts.t}.`)
    .update(rawBody)
    .digest("hex");
  const given = Buffer.from(parts.v1 ?? "", "hex");
  const wanted = Buffer.from(expected, "hex");
  return given.length === wanted.length && crypto.timingSafeEqual(given, wanted);
}