GET /health

{
  "status": "ok",
  "timestamp": "2024-01-01T00:00:00.000Z",
  "activePins": 0,
  "instance": "mi-instancia"
}

POST /register-pin
Content-Type: application/json

{
  "pin": "ABC123",
  "emojiString": "🔐🔑🔒"
}

{
  "success": true,
  "message": "PIN registrado correctamente",
  "pinId": "abc123",
  "expiresIn": 180
}

POST /check-login
Content-Type: application/json

{
  "pin": "ABC123"
}

{
  "success": true,
  "verified": false,
  "message": "Login pendiente"
}

{
  "success": true,
  "verified": true,
  "token": "eyJhbGciOiJIUzI1NiIs...",
  "refreshToken": "eyJhbGciOiJIUzI1NiIs...",
  "user": {
    "id": "123",
    "name": "Juan",
    "phone": "+1234567890",
    "roles": ["user"]
  }
}

POST /whatsapp-endpoint
Content-Type: application/json

{
  "event": "messages.upsert",
  "instance": "mi-instancia",
  "data": {
    "key": {
      "remoteJid": "1234567890@s.whatsapp.net",
      "fromMe": false
    },
    "pushName": "Usuario",
    "message": {
      "conversation": "PIN: 🔐🔑🔒"
    }
  }
}

POST /refresh-token
Authorization: Bearer {access_token}

{
  "id": "123"
}

{
  "success": true,
  "token": "eyJhbGciOiJIUzI1NiIs...",
  "refreshToken": "eyJhbGciOiJIUzI1NiIs..."
}

GET /profile
Authorization: Bearer {access_token}

{
  "success": true,
  "user": {
    "id": "123",
    "name": "Juan",
    "surname": "Pérez",
    "phone": "+1234567890",
    "roles": ["user"]
  }
}

POST /logout
Authorization: Bearer {access_token}

{
  "id": "123"
}

{
  "success": true,
  "message": "Logout exitoso"
}

POST /send-message
Authorization: Bearer {access_token}
Content-Type: application/json

{
  "phoneNumber": "+1234567890",
  "message": "Hola, tu código es ABC123"
}

{
  "success": true,
  "message": "Mensaje enviado"
}

// Registrar PIN
socket.emit("register-pin", {
  pin: "ABC123",
  emojiString: "🔐🔑🔒",
});

// Cancelar autenticación
socket.emit("cancel-auth", {
  pin: "ABC123",
});

// PIN registrado
socket.on("pin-registered", (data) => {
  console.log("PIN registrado:", data.pinId);
});

// Autenticación exitosa
socket.on("auth-success", (data) => {
  console.log("Token:", data.token);
  console.log("Usuario:", data.user);
});

// PIN expirado
socket.on("pin-expired", (data) => {
  console.log("PIN expirado:", data.pin);
});

// Error
socket.on("pin-error", (data) => {
  console.error("Error:", data.error);
});