Set Business Public Key

In order to decrypt and encrypt data passed through WhatsApp Flows, every WhatsApp Business Account (WABA) requires a key pair, which needs to be signed for every phone number sending Flows within the WABA.

Generating a 2048-bit RSA Key Pair

Generate a public and private RSA key pair by typing in the following command in the terminal / console within your operating system (Note: OpenSSL needs to be installed):

The generates 2048-bit RSA key pair encrypted with the password you provided and is written to the private.pem file.

Next, you need to export the RSA public key to a file, which can be accessed within your file system:

In Postman, when inputting the business public key as a parameter in the Body, select x-www-form-urlencoded. Additionally, the public key needs to be copied in full to work (from ----BEGIN PUBLIC KEY---- and ending with ----END PUBLIC KEY----).

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

curl --location -g --request POST 'https://api.chakrahq.com/v1/whatsapp/v24.0/{{$number.int(min=1)}}/whatsapp_business_encryption' \ --header 'Authorization: Bearer <token>' \ --data-urlencode 'business_public_key=-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtscozA5D825iIPOKhr3U Lj4DFx4J54z2RUBTklv1Oy3q4M3ZN4uXQbV9/FDe7t/SsGWY1mkHFCLQIbxtY860 dSqXvjwDM/XSqxNFGW+l922elr9tJ0ytCSCvYWlKxPSF5DoMH2VQe+QeKkteJgyO IP4CO24Cetda437BeXFdEAiK+bCbp5qruPlBwtdyeImqeNXTqNQLLuqXOKJbkFJh F6m2nTSztBlXOeN6uieKIKR0pY9EkAPNwRjbfJT9qBT8l+SUVlkx9/9kP940Eiqa rLBU+dCbN5xvm2H7ZtWud+IK9ANNc9RBbDMy0hptPAbVQ47hjUqD8FO9xAw5JVOa 7QIDAQAB -----END PUBLIC KEY-----'

Set Business Public Key

Generating a 2048-bit RSA Key Pair