คู่มือ Bazi API v2

curl https://bazi.fengshuix.com/api/v2/me -H "x-api-key: $BAZI_API_KEY"

curl -X POST https://bazi.fengshuix.com/api/v2/transit \
  -H "x-api-key: $BAZI_API_KEY" -H "Content-Type: application/json" \
  -d '{"birth":{"date":"1990-05-15","time":"14:30","gender":"male"},"lang":"th"}'

{
  "success": true,
  "request_id": "1f0c…",          // อ้างอิงเวลาติดต่อทีมงาน · ตรงกับ /api/v2/usage
  "endpoint": "transit",           // ชื่อที่ใช้คิดราคา
  "cost": 3,                       // โทเคนที่ถูกตัดครั้งนี้ (0 = ฟรี)
  "balance_after": 497,            // ยอดคงเหลือหลังตัด (null = ไม่ได้ตัด)
  "resolved": { … },               // ค่าที่ระบบตีความจากคำขอ เช่นเวลาที่ใช้คำนวณ
  "warnings": [ "unknown_birth_time: hour pillar omitted from every calculation" ],
  "data": { "subject": { "source": "profile", "profile_id": "…", "gender": "male", "unknown_birth_time": false }, … }
}

// ผิดพลาด
{ "success": false, "request_id": "…", "error": "birth.date must be YYYY-MM-DD" }

{ "birth": { "date": "1985-11-02", "gender": "female" } }                          // ไม่ทราบเวลาเกิด
{ "birth": { "date": "1990-05-15", "time": "23:30", "gender": "male", "tz_offset": 8 } }  // เกิดที่จีน
{ "birth": { "date": "1990-05-15", "time": "06:10", "gender": "male",
             "location_id": "th_chiangmai", "true_solar_time": true } }                  // เวลาสุริยะจริง

{ "profile_id": "…" }                                            // ตอนนี้ (เวลาไทย)
{ "profile_id": "…", "tz": "Asia/Tokyo" }                        // ตอนนี้ (เวลาญี่ปุ่น)
{ "profile_id": "…", "at": "2026-10-01T14:30:00+07:00" }         // เวลาที่ระบุ
{ "profile_id": "…", "date": "2027-02-03" }                      // ทั้งวัน

// Node.js — signed request (+ optional payload encryption)
import crypto from 'crypto';
const KEY = process.env.BAZI_API_KEY, SECRET = process.env.BAZI_API_SECRET;   // bz_live_… / bzs_…
const encKey = crypto.createHash('sha256').update('bazi-api-v2-enc:' + SECRET).digest();

async function signedCall(path, payload, encrypt = false) {
  let body = JSON.stringify(payload);
  if (encrypt) {
    const iv = crypto.randomBytes(12);
    const c = crypto.createCipheriv('aes-256-gcm', encKey, iv);
    const ct = Buffer.concat([c.update(body, 'utf8'), c.final()]);
    body = JSON.stringify({ iv: iv.toString('base64'), ciphertext: ct.toString('base64'), tag: c.getAuthTag().toString('base64') });
  }
  const ts = Math.floor(Date.now() / 1000).toString();
  const nonce = crypto.randomBytes(16).toString('hex');
  const sig = crypto.createHmac('sha256', SECRET).update([ts, nonce, 'POST', path, encrypt ? '1' : '0', body].join('.')).digest('hex');
  const res = await fetch('https://bazi.fengshuix.com' + path, { method: 'POST', body, headers: {
    'x-api-key': KEY, 'Content-Type': 'application/json',
    'X-Bazi-Timestamp': ts, 'X-Bazi-Nonce': nonce, 'X-Bazi-Signature': sig,
    ...(encrypt ? { 'X-Bazi-Encrypted': '1' } : {}) } });
  const out = await res.json();
  if (!out.encrypted) return out;
  const d = crypto.createDecipheriv('aes-256-gcm', encKey, Buffer.from(out.iv, 'base64'));
  d.setAuthTag(Buffer.from(out.tag, 'base64'));
  return JSON.parse(Buffer.concat([d.update(Buffer.from(out.ciphertext, 'base64')), d.final()]).toString('utf8'));
}

await signedCall('/api/v2/transit', { birth: { date: '1990-05-15', time: '14:30', gender: 'male' } }, true);

# Python 3 — signed + encrypted request (pip install requests cryptography)
import os, json, time, hmac, hashlib, base64, secrets, requests
from cryptography.hazmat.primitives.ciphers.aead import AESGCM

KEY, SECRET = os.environ["BAZI_API_KEY"], os.environ["BAZI_API_SECRET"]
ENC = hashlib.sha256(("bazi-api-v2-enc:" + SECRET).encode()).digest()

def signed_call(path, payload, encrypt=False):
    body = json.dumps(payload, ensure_ascii=False)
    if encrypt:
        iv = secrets.token_bytes(12)
        sealed = AESGCM(ENC).encrypt(iv, body.encode(), None)        # ciphertext + tag (16 bytes)
        body = json.dumps({"iv": base64.b64encode(iv).decode(),
                           "ciphertext": base64.b64encode(sealed[:-16]).decode(),
                           "tag": base64.b64encode(sealed[-16:]).decode()})
    ts, nonce = str(int(time.time())), secrets.token_hex(16)
    sig = hmac.new(SECRET.encode(), f"{ts}.{nonce}.POST.{path}.{'1' if encrypt else '0'}.{body}".encode(), hashlib.sha256).hexdigest()
    headers = {"x-api-key": KEY, "Content-Type": "application/json",
               "X-Bazi-Timestamp": ts, "X-Bazi-Nonce": nonce, "X-Bazi-Signature": sig}
    if encrypt: headers["X-Bazi-Encrypted"] = "1"
    out = requests.post("https://bazi.fengshuix.com" + path, data=body.encode(), headers=headers, timeout=30).json()
    if out.get("encrypted"):
        raw = base64.b64decode(out["ciphertext"]) + base64.b64decode(out["tag"])
        out = json.loads(AESGCM(ENC).decrypt(base64.b64decode(out["iv"]), raw, None))
    return out

// Node.js 18+ / Deno / Bun — call from your server only
const KEY = process.env.BAZI_API_KEY;

async function bazi(path, body) {
  const res = await fetch('https://bazi.fengshuix.com' + path, {
    method: body ? 'POST' : 'GET',
    headers: { 'x-api-key': KEY, 'Content-Type': 'application/json', 'Idempotency-Key': crypto.randomUUID() },
    body: body ? JSON.stringify(body) : undefined,
  });
  const out = await res.json();
  if (!out.success) throw new Error(`${res.status} ${out.error} (request_id ${out.request_id})`);
  return out; // { cost, balance_after, resolved?, warnings?, data }
}

const today = await bazi('/api/v2/transit', { profile_id: 'abc123def456ghi', lang: 'en' });
console.log(today.data.day_verdict.label, today.cost, today.balance_after);

# Python 3 + requests
import os, uuid, requests

KEY = os.environ["BAZI_API_KEY"]
BASE = "https://bazi.fengshuix.com"

def bazi(path, body=None):
    r = requests.request("POST" if body is not None else "GET", BASE + path, json=body, timeout=30,
                         headers={"x-api-key": KEY, "Idempotency-Key": str(uuid.uuid4())})
    out = r.json()
    if not out.get("success"):
        raise RuntimeError(f"{r.status_code} {out.get('error')} (request_id {out.get('request_id')})")
    return out

chart = bazi("/api/v2/chart", {"birth": {"date": "1990-05-15", "time": "14:30", "gender": "male"}, "lang": "en",
                               "sections": ["pillars", "elements"]})
print(chart["data"]["elements"], chart["cost"])

<?php
function bazi(string $path, ?array $body = null): array {
    $ch = curl_init('https://bazi.fengshuix.com' . $path);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER => ['x-api-key: ' . getenv('BAZI_API_KEY'), 'Content-Type: application/json',
                               'Idempotency-Key: ' . bin2hex(random_bytes(16))],
        CURLOPT_POST => $body !== null,
        CURLOPT_POSTFIELDS => $body !== null ? json_encode($body, JSON_UNESCAPED_UNICODE) : null,
    ]);
    $out = json_decode(curl_exec($ch), true);
    if (empty($out['success'])) throw new Exception(($out['error'] ?? 'error') . ' ' . ($out['request_id'] ?? ''));
    return $out;
}
$r = bazi('/api/v2/auspicious-dates', ['profile_id' => 'abc123def456ghi', 'start_date' => '2026-10-01',
          'end_date' => '2026-12-29', 'category' => 'wedding', 'limit' => 5]);
foreach ($r['data']['results'] as $x) echo $x['date'], ' ', $x['hourData']['timeStr'], ' ', $x['score'], PHP_EOL;

curl "https://bazi.fengshuix.com/api/v2/me" -H "x-api-key: $BAZI_API_KEY"

curl "https://bazi.fengshuix.com/api/v2/pricing" -H "x-api-key: $BAZI_API_KEY"

curl "https://bazi.fengshuix.com/api/v2/usage" -H "x-api-key: $BAZI_API_KEY"

curl -X POST https://bazi.fengshuix.com/api/v2/partner/auspicious-30d -H "x-api-key: $BAZI_API_KEY" -H "Content-Type: application/json" \
  -d '{ "birth": { "date": "1988-05-14", "time": "09:30", "gender": "female" }, "start_date": "2026-10-01", "sort": "score", "per_day": 3, "lang": "th" }'

curl "https://bazi.fengshuix.com/api/v2/courses" -H "x-api-key: $BAZI_API_KEY"