Nano Banana 2

curl -X POST https://api.ezflows.io/v1/models/nano-banana-2 \
  -H "Authorization: Bearer $EZFLOWS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "prompt": "A professional photograph of a beautifully crafted hand-painted gold leaf sign on a glass window pane. The central focus is the text '\''MEXITALY'\'' rendered in an elegant, red and gold script font. Below it, in larger, bold, gold beveled letters with a deep red shadow and gold outline, are the words '\''TORNABUONI'\''. Underneath, in smaller, teal and cream script lettering, is '\''Strada64'\'', followed by '\''BarandRestaurant'\'' on the final line in the same teal and cream script style. The entire text composition is framed by intricate gold and teal decorative flourishes and stylized star motifs. The reflection of a warm, bustling European street, specifically Via de'\'' Tornabuoni in Florence with its historic architecture and pedestrian crowds at twilight, is visible through the glass pane, adding depth to the image. The glass itself has a slight texture. The perspective is a straight-on medium shot, capturing the details of the lettering and the atmospheric reflection.",
    "system_prompt": ""
  }'

# 202 Accepted, at once — it never waits for the model:
# {"request_id": "req_8f2a41c9b70e4d15", "status": "queued",
#  "poll_url": "https://api.ezflows.io/v1/requests/req_8f2a41c9b70e4d15"}

REQUEST_ID=req_8f2a41c9b70e4d15   # from the POST

while :; do
  BODY=$(curl -s https://api.ezflows.io/v1/requests/$REQUEST_ID \
    -H "Authorization: Bearer $EZFLOWS_API_KEY")
  STATUS=$(echo "$BODY" | jq -r .data.status)
  case "$STATUS" in succeeded|failed|cancelled) break ;; esac
  sleep 3
done

echo "$BODY" | jq -r '.data.output.artifacts[].url'   # media.ezflows.io, kept 90 days

{
  "data": {
    "id": "req_8f2a41c9b70e4d15",
    "model_slug": "nano-banana-2",
    "status": "succeeded",
    "http_status": 200,
    "cost": 0.141539,
    "auth_method": "api_key",
    "error": null,
    "submitted_at": "2026-09-12T18:07:21.114Z",
    "queue_started_at": "2026-09-12T18:07:21.402Z",
    "execution_started_at": "2026-09-12T18:07:22.010Z",
    "first_byte_at": "2026-09-12T18:07:52.871Z",
    "finished_at": "2026-09-12T18:07:55.203Z",
    "io_deleted_at": null,
    "canvas_id": null,
    "canvas_node_id": null,
    "client_attempt_id": null,
    "idempotency_key": null,
    "input": {
      "prompt": "A professional photograph of a beautifully crafted hand-painted gold leaf sign on a glass window pane. The central focus is the text 'MEXITALY' rendered in an elegant, red and gold script font. Below it, in larger, bold, gold beveled letters with a deep red shadow and gold outline, are the words 'TORNABUONI'. Underneath, in smaller, teal and cream script lettering, is 'Strada64', followed by 'BarandRestaurant' on the final line in the same teal and cream script style. The entire text composition is framed by intricate gold and teal decorative flourishes and stylized star motifs. The reflection of a warm, bustling European street, specifically Via de' Tornabuoni in Florence with its historic architecture and pedestrian crowds at twilight, is visible through the glass pane, adding depth to the image. The glass itself has a slight texture. The perspective is a straight-on medium shot, capturing the details of the lettering and the atmospheric reflection.",
      "system_prompt": ""
    },
    "output": {
      "artifacts": [
        {
          "index": 0,
          "kind": "image",
          "contentType": "image/png",
          "url": "https://media.ezflows.io/outputs/<account>/req_8f2a41c9b70e4d15/0.png"
        }
      ]
    }
  }
}

{
  "id": "82cf46a4-841e-41d6-b3c7-facc937d3252",
  "type": "request.succeeded",
  "created_at": "2026-09-12T18:07:55Z",
  "data": {
    "id": "req_8f2a41c9b70e4d15",
    "model_slug": "nano-banana-2",
    "status": "succeeded",
    "cost": 0.141539,
    "output": {
      "artifacts": [
        {
          "url": "https://media.ezflows.io/…/0.png"
        }
      ]
    }
  }
}

# Create the endpoint under Webhooks in the dashboard; the signing secret is shown once.
# ezflows-signature: t=<ts>,v1=<hex HMAC-SHA256 of "<ts>.<raw body>">
# body.json = the exact bytes received. Reject anything older than five minutes.
EXPECTED=$({ printf '%s.' "$TS"; cat body.json; } \
  | openssl dgst -sha256 -hmac "$EZFLOWS_WEBHOOK_SECRET" -r | cut -d' ' -f1)

[ "$EXPECTED" = "$V1" ] && echo "valid" || echo "reject"