Your first call takes about a minute

curl https://api.tathaastuapi.com/v1/panchang \
  -H "X-API-Key: $TATHAASTU_API_KEY" \
  -G --data-urlencode "date=2026-11-08" \
     --data-urlencode "location_id=1"

# Never put the key in a query string — it will end up
# in server logs, browser history and referrer headers.

import hmac, hashlib

def verify(raw_body: bytes, signature: str, secret: str) -> bool:
    expected = "sha256=" + hmac.new(
        secret.encode(), raw_body, hashlib.sha256
    ).hexdigest()
    return hmac.compare_digest(expected, signature)

# Delivery is at-least-once — always dedupe on the event id.
seen: set[str] = set()

def handle(request):
    if not verify(request.body, request.headers["X-TathaAstu-Signature"], SECRET):
        return 401
    event_id = request.headers["X-TathaAstu-Event-Id"]
    if event_id in seen:
        return 200          # already processed
    seen.add(event_id)
    process(request.json())
    return 200