A small personal notebook of API integration snippets I keep coming back to — mostly messaging, webhooks, and auth flows.
Typical shape for a POST call: curl -X POST /endpoint -H "Authorization: Bearer …" -d '{"to":"…","body":"…"}'. Remember to set idempotency keys on retries.
Log the raw payload before signature verification; most "invalid signature" bugs are body-parsing mismatches, not the secret.
Generate + store codes yourself (short TTL, attempt caps, per-phone rate limits); treat SMS as transport only.