const API = 'https://api.shernova.com';

export async function createVerification(phoneNumber, requestId) {
  const res = await fetch(API + '/v1/verifications', {
    method: 'POST',
    headers: {
      Authorization: 'Bearer ' + process.env.SHERNOVA_SECRET_KEY,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      phone_number: phoneNumber,
      client_request_id: requestId,
    }),
  });
  const data = await res.json();
  if (!res.ok) throw Object.assign(new Error(data.message), { data });
  return data;
}

import os, requests

def create_verification(phone_number: str, request_id: str) -> dict:
    response = requests.post(
        "https://api.shernova.com/v1/verifications",
        headers={"Authorization": f"Bearer {os.environ['SHERNOVA_SECRET_KEY']}"},
        json={"phone_number": phone_number, "client_request_id": request_id},
        timeout=20,
    )
    response.raise_for_status()
    return response.json()

<?php
function create_verification(string $phone, string $requestId): array {
    $ch = curl_init('https://api.shernova.com/v1/verifications');
    curl_setopt_array($ch, [
        CURLOPT_POST => true,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER => [
            'Authorization: Bearer ' . getenv('SHERNOVA_SECRET_KEY'),
            'Content-Type: application/json',
        ],
        CURLOPT_POSTFIELDS => json_encode([
            'phone_number' => $phone,
            'client_request_id' => $requestId,
        ]),
    ]);
    $body = curl_exec($ch);
    $status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    if ($status >= 400) throw new RuntimeException((string) $body);
    return json_decode((string) $body, true);
}

{
  "session_id": "8f14e45f-ea3c-4f3f-a1c2-4d7c8b6a9f01",
  "status": "waiting",
  "phone_number": "+201012345678",
  "gateway_phone_number": "+201001234567",
  "qr_code_data": "tel:+201001234567",
  "environment": "live",
  "expires_at": "2026-10-21T12:05:00.000Z"
}

export async function getVerification(sessionId) {
  const res = await fetch(API + '/v1/verifications/' + encodeURIComponent(sessionId), {
    headers: { Authorization: 'Bearer ' + process.env.SHERNOVA_SECRET_KEY },
  });
  return res.json();
}

export async function cancelVerification(sessionId) {
  const res = await fetch(API + '/v1/verifications/' + encodeURIComponent(sessionId), {
    method: 'DELETE',
    headers: { Authorization: 'Bearer ' + process.env.SHERNOVA_SECRET_KEY },
  });
  return res.json();
}

curl "https://api.shernova.com/v1/verifications/SESSION_UUID" \
  -H "Authorization: Bearer sk_live_YOUR_SECRET_KEY"

curl -X DELETE "https://api.shernova.com/v1/verifications/SESSION_UUID" \
  -H "Authorization: Bearer sk_live_YOUR_SECRET_KEY"

import express from 'express';
import crypto from 'node:crypto';

const app = express();
app.post('/webhooks/shernova', express.raw({ type: 'application/json' }), (req, res) => {
  const received = String(req.headers['x-shernova-signature'] || '').replace(/^sha256=/, '');
  const expected = crypto
    .createHmac('sha256', process.env.SHERNOVA_WEBHOOK_SECRET)
    .update(req.body)
    .digest('hex');

  const a = Buffer.from(expected);
  const b = Buffer.from(received);
  if (a.length !== b.length || !crypto.timingSafeEqual(a, b)) {
    return res.status(401).send('invalid signature');
  }

  const event = JSON.parse(req.body.toString());
  if (event.status === 'verified' || event.status === 'completed') {
    // وثّق الهاتف/المستخدم في قاعدة بياناتك.
  }
  res.sendStatus(200);
});

import hmac, hashlib, os
from flask import Flask, request

app = Flask(__name__)

@app.post("/webhooks/shernova")
def shernova_webhook():
    raw = request.get_data()
    received = request.headers.get("X-Shernova-Signature", "").removeprefix("sha256=")
    expected = hmac.new(
        os.environ["SHERNOVA_WEBHOOK_SECRET"].encode(), raw, hashlib.sha256
    ).hexdigest()
    if not hmac.compare_digest(expected, received):
        return "invalid signature", 401
    event = request.get_json(force=True)
    if event.get("status") in ("verified", "completed"):
        pass  # وثّق الرقم في قاعدة بياناتك
    return "", 200