curl -X POST https://votre-domaine.fr/v1/otp/request \
  -H "X-API-Key: pvk_…" -H "Content-Type: application/json" \
  -d '{"phone":"+33612345678","channel":"telegram","fallback_channels":["whatsapp"]}'

curl -X POST https://votre-domaine.fr/v1/otp/verify \
  -H "X-API-Key: pvk_…" -H "Content-Type: application/json" \
  -d '{"request_id":"…","code":"123456"}'

const API = "https://votre-domaine.fr", KEY = process.env.OTP_KEY;

async function requestOtp(phone) {
  const r = await fetch(`${API}/v1/otp/request`, {
    method: "POST",
    headers: { "X-API-Key": KEY, "Content-Type": "application/json" },
    body: JSON.stringify({ phone, channel: "telegram",
                           fallback_channels: ["whatsapp"] }),
  });
  const d = await r.json();
  if (!r.ok) throw new Error(JSON.stringify(d)); // voir d.channel_errors
  return d.request_id;                 // stockez côté serveur
}

async function verifyOtp(request_id, code) {
  const r = await fetch(`${API}/v1/otp/verify`, {
    method: "POST",
    headers: { "X-API-Key": KEY, "Content-Type": "application/json" },
    body: JSON.stringify({ request_id, code }),
  });
  return (await r.json()).status === "verified";
}

import httpx, os

API, KEY = "https://votre-domaine.fr", os.environ["OTP_KEY"]
H = {"X-API-Key": KEY}

def request_otp(phone: str) -> str:
    r = httpx.post(f"{API}/v1/otp/request", headers=H, json={
        "phone": phone, "channel": "telegram",
        "fallback_channels": ["whatsapp"],
    }, timeout=15)
    r.raise_for_status()
    return r.json()["request_id"]

def verify_otp(request_id: str, code: str) -> bool:
    r = httpx.post(f"{API}/v1/otp/verify", headers=H, json={
        "request_id": request_id, "code": code,
    }, timeout=15)
    return r.json().get("status") == "verified"