How to send a group message in Python with the Wapito WhatsApp API

"""Send Group Message with the Wapito WhatsApp API.

Address the group id like any recipient, attach media by id, ask questions as polls, and aggregate the per-participant delivery receipts.

Run it with:
    export WAPITO_TOKEN="wpt_..."
    python send-group-message.py
"""
import os

import requests

BASE_URL = "https://api.wapito.com/v1"
TOKEN = os.environ["WAPITO_TOKEN"]

# --- Send text to the group id ---
url = BASE_URL + "/messages/text"

payload = {
    "to": "+15551234567",
    "body": "Your order #4182 has shipped. Track it here: https://acme.example/t/4182",
    "typing_time": 3
}
headers = {
    "Authorization": "Bearer " + TOKEN,
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.json())

# --- Attach an image or a document ---
url = BASE_URL + "/messages/image"

payload = {
    "to": "+15551234567",
    "media": "https://acme.example/labels/4182.png",
    "caption": "Your shipping label for order #4182"
}
headers = {
    "Authorization": "Bearer " + TOKEN,
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.json())

# --- Ask with a poll rather than free text ---
url = BASE_URL + "/messages/poll"

payload = {
    "to": "120363041234567890@g.us",
    "title": "When should we run the launch standup?",
    "options": ["Monday 09:00", "Tuesday 10:00", "Wednesday 16:00"],
    "multiple": False
}
headers = {
    "Authorization": "Bearer " + TOKEN,
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.json())

import hashlib
import hmac
import os
import time

from fastapi import FastAPI, Header, HTTPException, Request

app = FastAPI()
SECRET = os.environ["WAPITO_WEBHOOK_SECRET"].encode()
EVENTS = ["messages", "messages.status", "polls"]


def verify(raw: bytes, header: str | None) -> bool:
    """Checks the X-Wapito-Signature header: t=<ms>,v1=<hex hmac-sha256>."""
    if not header:
        return False
    parts = dict(p.split("=", 1) for p in header.split(",") if "=" in p)
    ts, sig = parts.get("t"), parts.get("v1")
    if not ts or not sig:
        return False
    if abs(time.time() * 1000 - int(ts)) > 300_000:  # 5 minute clock skew
        return False
    expected = hmac.new(SECRET, ts.encode() + b"." + raw, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, sig)


@app.post("/wapito")
async def wapito(request: Request, signature: str | None = Header(default=None, alias="X-Wapito-Signature")):
    raw = await request.body()
    if not verify(raw, signature):
        raise HTTPException(status_code=401, detail="bad signature")
    payload = await request.json()
    if payload["event"] in EVENTS:
        print(payload["event"], payload["data"])
    return {"ok": True}  # answer 2xx fast; do the real work in a queue