Account

API_KEY="your-api-key"
EMAIL="[email protected]"
ENDPOINT="https://portal.hostraha.com/modules/addons/DomainsReseller/api/index.php"
TS=$(date -u +"%y-%m-%d %H")
TOKEN=$(printf '%s' "$API_KEY" \
  | openssl dgst -sha256 -hmac "$EMAIL:$TS" -hex \
  | sed 's/^.*= //' | tr -d '\n' | base64 -w0)

curl -s "$ENDPOINT/billing/credits" -H "username: $EMAIL" -H "token: $TOKEN"
curl -s "$ENDPOINT/version"         -H "username: $EMAIL" -H "token: $TOKEN"

<?php
$apiKey   = "your-api-key";
$email    = "[email protected]";
$endpoint = "https://portal.hostraha.com/modules/addons/DomainsReseller/api/index.php";

$token = base64_encode(hash_hmac("sha256", $apiKey, "{$email}:" . gmdate("y-m-d H")));

function call(string $url, string $email, string $token): string {
    $curl = curl_init();
    curl_setopt($curl, CURLOPT_URL, $url);
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($curl, CURLOPT_HTTPHEADER, [
        "username: {$email}",
        "token: {$token}",
    ]);
    $response = curl_exec($curl);
    curl_close($curl);
    return $response;
}

echo call("{$endpoint}/billing/credits", $email, $token) . "\n";
echo call("{$endpoint}/version", $email, $token) . "\n";

import base64, hashlib, hmac
from datetime import datetime, timezone
import requests

API_KEY  = "your-api-key"
EMAIL    = "[email protected]"
ENDPOINT = "https://portal.hostraha.com/modules/addons/DomainsReseller/api/index.php"

def token() -> str:
    ts = datetime.now(timezone.utc).strftime("%y-%m-%d %H")
    digest = hmac.new(f"{EMAIL}:{ts}".encode(), API_KEY.encode(), hashlib.sha256).hexdigest()
    return base64.b64encode(digest.encode()).decode()

headers = {"username": EMAIL, "token": token()}
print(requests.get(f"{ENDPOINT}/billing/credits", headers=headers).json())
print(requests.get(f"{ENDPOINT}/version", headers=headers).json())

import crypto from "node:crypto";

const API_KEY  = "your-api-key";
const EMAIL    = "[email protected]";
const ENDPOINT = "https://portal.hostraha.com/modules/addons/DomainsReseller/api/index.php";

function token() {
  const ts = new Date().toISOString().slice(2, 13).replace("T", " "); // "yy-mm-dd HH" UTC
  const digest = crypto.createHmac("sha256", `${EMAIL}:${ts}`).update(API_KEY).digest("hex");
  return Buffer.from(digest, "utf8").toString("base64");
}

const headers = { username: EMAIL, token: token() };
console.log(await (await fetch(`${ENDPOINT}/billing/credits`, { headers })).json());
console.log(await (await fetch(`${ENDPOINT}/version`, { headers })).json());

package main

import (
	"crypto/hmac"
	"crypto/sha256"
	"encoding/base64"
	"encoding/hex"
	"fmt"
	"io"
	"net/http"
	"time"
)

const (
	apiKey   = "your-api-key"
	email    = "[email protected]"
	endpoint = "https://portal.hostraha.com/modules/addons/DomainsReseller/api/index.php"
)

func token() string {
	ts := time.Now().UTC().Format("06-01-02 15") // yy-mm-dd HH
	mac := hmac.New(sha256.New, []byte(email+":"+ts))
	mac.Write([]byte(apiKey))
	return base64.StdEncoding.EncodeToString([]byte(hex.EncodeToString(mac.Sum(nil))))
}

func get(path, tok string) string {
	req, _ := http.NewRequest("GET", endpoint+path, nil)
	req.Header.Set("username", email)
	req.Header.Set("token", tok)
	resp, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer resp.Body.Close()
	body, _ := io.ReadAll(resp.Body)
	return string(body)
}

func main() {
	tok := token()
	fmt.Println(get("/billing/credits", tok))
	fmt.Println(get("/version", tok))
}