Vibe code a WhatsApp OTP login

// app/api/otp/send/route.ts
export async function POST(request: Request) {
  const { phone } = await request.json();
  const response = await fetch("https://app.waloops.com/api/otp/send.php", {
    method: "POST",
    headers: {
      "X-API-Key": process.env.WALOOPS_API_KEY!,
      "X-Site-Url": process.env.APP_URL!,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({ phone }),
  });
  return Response.json(await response.json(), { status: response.status });
}

// app/api/otp/verify/route.ts
export async function POST(request: Request) {
  const { phone, code } = await request.json();
  const response = await fetch("https://app.waloops.com/api/otp/verify.php", {
    method: "POST",
    headers: {
      "X-API-Key": process.env.WALOOPS_API_KEY!,
      "X-Site-Url": process.env.APP_URL!,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({ phone, code }),
  });
  return Response.json(await response.json(), { status: response.status });
}

Deno.serve(async (request) => {
  const { action, phone, code } = await request.json();
  const verifying = action === "verify";
  const response = await fetch(
    verifying
      ? "https://app.waloops.com/api/otp/verify.php"
      : "https://app.waloops.com/api/otp/send.php",
    {
      method: "POST",
      headers: {
        "X-API-Key": Deno.env.get("WALOOPS_API_KEY")!,
        "X-Site-Url": Deno.env.get("APP_URL")!,
        "Content-Type": "application/json",
      },
      body: JSON.stringify(verifying ? { phone, code } : { phone }),
    },
  );
  return new Response(await response.text(), {
    status: response.status,
    headers: { "Content-Type": response.headers.get("Content-Type") ?? "application/json" },
  });
});

$verify = false;
$endpoint = $verify
    ? 'https://app.waloops.com/api/otp/verify.php'
    : 'https://app.waloops.com/api/otp/send.php';
$payload = $verify
    ? ['phone' => $phone, 'code' => $code]
    : ['phone' => $phone];

$curl = curl_init($endpoint);
curl_setopt_array($curl, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'X-API-Key: ' . getenv('WALOOPS_API_KEY'),
        'X-Site-Url: ' . getenv('APP_URL'),
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload),
]);
$response = curl_exec($curl);
if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}
$status = curl_getinfo($curl, CURLINFO_HTTP_CODE);
curl_close($curl);