/php Temp Email API

composer require guzzlehttp/guzzle

export OPENINBOX_API_KEY="your-premium-api-key"

<?php

namespace Tests\Support;

use GuzzleHttp\Client;
use RuntimeException;

final class OpenInbox
{
    private string $base = 'https://api.openinbox.io/api';
    private Client $http;
    private string $apiKey;

    public function __construct(?string $apiKey = null)
    {
        $this->apiKey = $apiKey ?? (string) getenv('OPENINBOX_API_KEY');
        $this->http = new Client(['http_errors' => false]);
    }

    /** Create a disposable inbox (no auth required). */
    public function createInbox(): array
    {
        $res = $this->http->post($this->base . '/inbox');
        return json_decode((string) $res->getBody(), true); // ['id','email','expiresAt',...]
    }

    /** Poll until an email arrives, then return the OTP from textBody. */
    public function waitForOtp(string $inboxEmail, int $timeout = 30): string
    {
        $deadline = time() + $timeout;
        while (time() < $deadline) {
            $res = $this->http->get($this->base . '/inbound/api/emails', [
                'query'   => ['inboxEmail' => $inboxEmail],
                'headers' => ['X-API-KEY' => $this->apiKey],
            ]);
            $emails = json_decode((string) $res->getBody(), true)['emails'] ?? [];
            if ($emails && preg_match('/\b\d{4,8}\b/', $emails[0]['textBody'] ?? '', $m)) {
                return $m[0];
            }
            sleep(2);
        }
        throw new RuntimeException('No OTP email arrived in time');
    }
}

<?php

use PHPUnit\Framework\TestCase;
use Tests\Support\OpenInbox;

final class SignupVerificationTest extends TestCase
{
    public function test_user_verifies_email_with_otp(): void
    {
        $openInbox = new OpenInbox();
        $inbox = $openInbox->createInbox();

        // Trigger your app so it emails the verification code
        $ch = curl_init('https://staging.yourapp.com/api/register');
        curl_setopt_array($ch, [
            CURLOPT_POST           => true,
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_HTTPHEADER     => ['Content-Type: application/json'],
            CURLOPT_POSTFIELDS     => json_encode([
                'email'    => $inbox['email'],
                'password' => 'Str0ng!Pass',
            ]),
        ]);
        curl_exec($ch);

        // Pull the OTP from the disposable inbox
        $otp = $openInbox->waitForOtp($inbox['email']);
        $this->assertMatchesRegularExpression('/^\d{4,8}$/', $otp);

        // …submit $otp to your verify endpoint and assert the success state
    }
}

<?php
$base = 'https://api.openinbox.io/api';
$apiKey = getenv('OPENINBOX_API_KEY');

// 1. Create an inbox (no auth required)
$ch = curl_init("$base/inbox");
curl_setopt_array($ch, [CURLOPT_POST => true, CURLOPT_RETURNTRANSFER => true]);
$inbox = json_decode(curl_exec($ch), true);
echo "Inbox: {$inbox['email']}" . PHP_EOL;

// 2. Poll for the email (X-API-KEY required)
for ($i = 0; $i < 15; $i++) {
    sleep(2);
    $url = "$base/inbound/api/emails?inboxEmail=" . urlencode($inbox['email']);
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER     => ["X-API-KEY: $apiKey"],
    ]);
    $emails = json_decode(curl_exec($ch), true)['emails'] ?? [];
    if ($emails) {
        preg_match('/\b\d{4,8}\b/', $emails[0]['textBody'], $m);
        echo "OTP: {$m[0]}" . PHP_EOL;
        break;
    }
}