SMS Onay API

curl -X POST https://alfsmm.com/api/v1/activations \
  -H "Authorization: Bearer alf_ANAHTARIN" \
  -H "Content-Type: application/json" \
  -d '{ "service": "wa", "country": 0 }'

# → { "ok": true, "activation": { "id": "cm9x…", "phone": "79261234567",
#     "status": "waiting", "priceKurus": 850, … } }

curl https://alfsmm.com/api/v1/activations/cm9x… \
  -H "Authorization: Bearer alf_ANAHTARIN"

# kod gelince:
# → { "ok": true, "activation": { "status": "code_received",
#     "code": "123456", "sms": "WhatsApp code 123-456", … } }

curl https://alfsmm.com/api/v1/balance \
  -H "Authorization: Bearer alf_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"

// başarı
{ "ok": true, …veri… }

// hata
{ "ok": false, "error": "Yetersiz bakiye. Lütfen bakiye yükleyin.", "code": "INSUFFICIENT_BALANCE" }

const BASE = "https://alfsmm.com/api/v1";
const HEADERS = {
  "Authorization": "Bearer " + process.env.ALFSMM_API_KEY,
  "Content-Type": "application/json",
};

async function getCode(service, country) {
  // 1) numara al
  let res = await fetch(BASE + "/activations", {
    method: "POST", headers: HEADERS,
    body: JSON.stringify({ service, country }),
  });
  let data = await res.json();
  if (!data.ok) throw new Error(data.code + ": " + data.error);
  const { id, phone } = data.activation;
  console.log("Numara:", phone);

  // 2) kodu bekle (5 sn'de bir, süre dolana dek)
  while (true) {
    await new Promise((r) => setTimeout(r, 5000));
    res = await fetch(BASE + "/activations/" + id, { headers: HEADERS });
    data = await res.json();
    const a = data.activation;
    if (a.status === "code_received") return a.code;
    if (a.status !== "waiting") throw new Error("Kod gelmedi: " + a.status); // iade edildi
  }
}

getCode("wa", 0).then((code) => console.log("Kod:", code));

import os, time, requests

BASE = "https://alfsmm.com/api/v1"
HEADERS = {"Authorization": "Bearer " + os.environ["ALFSMM_API_KEY"]}

def get_code(service: str, country: int) -> str:
    r = requests.post(f"{BASE}/activations", headers=HEADERS,
                      json={"service": service, "country": country}).json()
    if not r["ok"]:
        raise RuntimeError(f"{r['code']}: {r['error']}")
    act = r["activation"]
    print("Numara:", act["phone"])

    while True:
        time.sleep(5)
        r = requests.get(f"{BASE}/activations/{act['id']}", headers=HEADERS).json()
        a = r["activation"]
        if a["status"] == "code_received":
            return a["code"]
        if a["status"] != "waiting":
            raise RuntimeError("Kod gelmedi: " + a["status"])  # ücret iade edildi

print("Kod:", get_code("wa", 0))

https://alfsmm.com/stubs/handler_api.php?api_key=alf_…&action=<eylem>

POST <senin-url'in>
Content-Type: application/json
X-Webhook-Event: activation.code_received
X-Webhook-Signature: sha256=<gövdenin HMAC-SHA256 imzası>

{
  "event": "activation.code_received",
  "deliveryId": "a1b2c3…",
  "sentAt": "2026-07-08T09:00:00.000Z",
  "activation": { "id": "cm9x…", "phone": "79261234567", "code": "123456",
                  "sms": "WhatsApp code 123-456", "status": "code_received", … }
}

const crypto = require("crypto");
const expected = "sha256=" + crypto.createHmac("sha256", WEBHOOK_SECRET)
  .update(rawBody) // ham istek gövdesi (string)
  .digest("hex");
const received = String(req.headers["x-webhook-signature"] ?? "");
const valid =
  received.length === expected.length &&
  crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(received));