TapAuth API Documentation

Overview

TapAuth provides a simple WhatsApp-based authentication system for mobile applications. Your app submits the end user's WhatsApp number, the user sends a message to our bot, the bot verifies the number matches, and your app polls until the session is verified.

SDK Downloads

Use our official SDKs to integrate TapAuth quickly:

Authentication Flow

API Endpoints

{
  "wa_number": "6281234567890"
}

{
  "success": true,
  "identifier": "TAP-XXXXXXXXXXXX",
  "whatsapp_url": "whatsapp://send?phone=628123456789&text=...",
  "expires_in": 300
}

{
  "identifier": "TAP-XXXXXXXXXXXX"
}

{
  "status": "success",
  "wa_number": "6281234567890",
  "push_name": "John Doe"
}

{
  "error": "Session not ready for verification",
  "reason": "waiting",
  "message": "Menunggu verifikasi WhatsApp"
}

Integration

After requesting authentication, your backend should poll the verify endpoint to check if the user has completed verification via WhatsApp. Your mobile app polls your backend at an interval (e.g. every 3s), and your backend forwards the check to TapAuth using the API key.

Pricing

Code Examples

These examples run on your backend (the API key stays server-side). Your mobile app calls your backend, and your backend runs the request/verify polling below.

JavaScript (Fetch)

// Request authentication (send the user's WhatsApp number)
const response = await fetch('https://tapauth.my.id/api/v1/auth/request', {
  method: 'POST',
  headers: {
    'X-API-KEY': 'tap_your_api_key_here',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({ wa_number: '6281234567890' })
});
const data = await response.json();

// Open WhatsApp
window.location.href = data.whatsapp_url;

// Poll verify until the session is verified
async function poll(identifier) {
  while (true) {
    const res = await fetch('https://tapauth.my.id/api/v1/auth/verify', {
      method: 'POST',
      headers: {
        'X-API-KEY': 'tap_your_api_key_here',
        'Content-Type': 'application/json'
      },
      body: JSON.stringify({ identifier })
    });
    const result = await res.json();

    if (res.ok && result.status === 'success') {
      console.log(result.wa_number, result.push_name);
      return result;
    }
    if (result.reason === 'rejected') {
      throw new Error(result.message);
    }
    // reason === 'waiting' → try again shortly
    await new Promise(r => setTimeout(r, 3000));
  }
}
await poll(data.identifier);

PHP (cURL)

// Request authentication (send the user's WhatsApp number)
$ch = curl_init('https://tapauth.my.id/api/v1/auth/request');
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    'X-API-KEY: tap_your_api_key_here',
    'Content-Type: application/json'
]);
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
    'wa_number' => '6281234567890'
]));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$response = json_decode(curl_exec($ch));

// Poll verify until the session is verified
while (true) {
    $ch = curl_init('https://tapauth.my.id/api/v1/auth/verify');
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_HTTPHEADER, [
        'X-API-KEY: tap_your_api_key_here',
        'Content-Type: application/json'
    ]);
    curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([
        'identifier' => $response->identifier
    ]));
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    $body = curl_exec($ch);
    $code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    $userData = json_decode($body);

    if ($code === 200 && $userData->status === 'success') {
        echo $userData->wa_number;
        break;
    }
    if (isset($userData->reason) && $userData->reason === 'rejected') {
        throw new Exception($userData->message);
    }
    sleep(3); // reason === 'waiting'
}

Python (Requests)

import requests
import time

# Request authentication (send the user's WhatsApp number)
response = requests.post(
    'https://tapauth.my.id/api/v1/auth/request',
    headers={'X-API-KEY': 'tap_your_api_key_here'},
    json={'wa_number': '6281234567890'}
)
data = response.json()

# Poll verify until the session is verified
while True:
    res = requests.post(
        'https://tapauth.my.id/api/v1/auth/verify',
        headers={'X-API-KEY': 'tap_your_api_key_here'},
        json={'identifier': data['identifier']}
    )
    result = res.json()

    if res.status_code == 200 and result.get('status') == 'success':
        print(result['wa_number'], result['push_name'])
        break
    if result.get('reason') == 'rejected':
        raise Exception(result['message'])
    time.sleep(3)  # reason == 'waiting'

Support

For questions or support, please contact us through your dashboard or email [email protected]