SMS API της PILAS

https://www.pilas.gr/api/sms/v1

Authorization: Bearer pk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

curl -X POST https://www.pilas.gr/api/sms/v1/send \
  -H "Authorization: Bearer pk_live_xxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"to": "6912345678", "text": "Ο κωδικός σας είναι 4821"}'

<?php
$ch = curl_init('https://www.pilas.gr/api/sms/v1/send');
curl_setopt_array($ch, [
  CURLOPT_POST => true,
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_HTTPHEADER => [
    'Authorization: Bearer ' . getenv('PILAS_SMS_KEY'),
    'Content-Type: application/json',
  ],
  CURLOPT_POSTFIELDS => json_encode([
    'to'   => '6912345678',
    'text' => 'Ο κωδικός σας είναι 4821',
  ]),
]);
$res = json_decode(curl_exec($ch), true);
echo $res['messages'][0]['status']; // sent

const res = await fetch('https://www.pilas.gr/api/sms/v1/send', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${process.env.PILAS_SMS_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ to: '6912345678', text: 'Ο κωδικός σας είναι 4821' }),
});
const data = await res.json();
console.log(data.messages[0].status); // sent

import os, requests

r = requests.post(
    'https://www.pilas.gr/api/sms/v1/send',
    headers={'Authorization': f"Bearer {os.environ['PILAS_SMS_KEY']}"},
    json={'to': '6912345678', 'text': 'Ο κωδικός σας είναι 4821'},
    timeout=20,
)
print(r.json()['messages'][0]['status'])  # sent

{
  "ok": true,
  "batch_id": "bat_t3k9qx2f8a1c04e7b9",
  "mode": "live",
  "count": 1,
  "segments": 1,
  "credits_charged": 1,
  "summary": { "sent": 1 },
  "messages": [
    {
      "id": "msg_t3k9qx5d2e7a90c1f3",
      "batch_id": "bat_t3k9qx2f8a1c04e7b9",
      "to": "306912345678",
      "sender": "MYBRAND",
      "text": "Ο ΚΩΔΙΚΟΣ ΣΑΣ ΕΙΝΑΙ 4821",
      "segments": 1,
      "status": "sent",
      "error": null,
      "reference": null,
      "mode": "live",
      "credits_charged": 1,
      "created_at": "2026-11-02T10:15:04+02:00",
      "sent_at": "2026-11-02T10:15:05+02:00",
      "delivered_at": null
    }
  ],
  "balance": 4210
}

{
  "sender": "MYBRAND",
  "messages": [
    { "to": "6912345678", "text": "Η παραγγελία 1042 στάλθηκε", "reference": "order-1042" },
    { "to": "6987654321", "text": "Η παραγγελία 1043 στάλθηκε", "reference": "order-1043" }
  ]
}

{
  "to": ["6912345678", "6987654321"],
  "text": "Υπενθύμιση: το ραντεβού σας είναι αύριο στις 10:00",
  "schedule_at": "2026-11-05T18:00:00+02:00"
}

curl -X POST https://www.pilas.gr/api/sms/v1/messages/msg_t3k9qx5d2e7a90c1f3/cancel \
  -H "Authorization: Bearer pk_live_xxxxxxxx"

# ή όλη την αποστολή
curl -X POST https://www.pilas.gr/api/sms/v1/batches/bat_t3k9qx2f8a1c04e7b9/cancel \
  -H "Authorization: Bearer pk_live_xxxxxxxx"

curl "https://www.pilas.gr/api/sms/v1/messages?status=failed&from=2026-11-01&per_page=50" \
  -H "Authorization: Bearer pk_live_xxxxxxxx"

{
  "ok": true,
  "mode": "live",
  "credits": 4210,
  "unit": "SMS",
  "limits": { "per_minute": 60, "per_day": 2000, "used_today": 148, "max_recipients_per_request": 1000 }
}

{
  "event": "message.delivered",
  "created": 1762071310,
  "data": {
    "id": "msg_t3k9qx5d2e7a90c1f3",
    "batch_id": "bat_t3k9qx2f8a1c04e7b9",
    "to": "306912345678",
    "status": "delivered",
    "reference": "order-1042",
    "delivered_at": "2026-11-02T10:15:09+02:00"
  }
}

<?php
$secret = getenv('PILAS_WEBHOOK_SECRET'); // whsec_…
$body   = file_get_contents('php://input');
$header = $_SERVER['HTTP_X_PILAS_SIGNATURE'] ?? '';

preg_match('/t=(\d+),v1=([a-f0-9]+)/', $header, $m);
$expected = hash_hmac('sha256', $m[1] . '.' . $body, $secret);

if (!$m || !hash_equals($expected, $m[2]) || abs(time() - (int)$m[1]) > 300) {
  http_response_code(400); exit;
}
$event = json_decode($body, true);
// … ενημέρωσε τη βάση σου με $event['data']['status']
http_response_code(200);

import crypto from 'node:crypto';

// Express: app.post('/pilas-webhook', express.raw({ type: 'application/json' }), handler)
function handler(req, res) {
  const [, t, v1] = /t=(\d+),v1=([a-f0-9]+)/.exec(req.get('X-Pilas-Signature') || '') || [];
  const expected = crypto.createHmac('sha256', process.env.PILAS_WEBHOOK_SECRET)
    .update(`${t}.${req.body}`).digest('hex');
  const ok = v1 && crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(v1))
    && Math.abs(Date.now() / 1000 - Number(t)) < 300;
  if (!ok) return res.sendStatus(400);
  const event = JSON.parse(req.body);
  // … ενημέρωσε τη βάση σου με event.data.status
  res.sendStatus(200);
}

curl -X POST https://www.pilas.gr/api/sms/v1/send \
  -H "Authorization: Bearer pk_live_xxxxxxxx" \
  -H "Idempotency-Key: order-1042-shipped" \
  -H "Content-Type: application/json" \
  -d '{"to": "6912345678", "text": "Η παραγγελία σας στάλθηκε"}'

{
  "ok": false,
  "error": {
    "code": "insufficient_credits",
    "message": "Δεν υπάρχουν αρκετά SMS. Χρειάζονται 120, υπόλοιπο 80.",
    "credits_needed": 120,
    "balance": 80
  }
}