ABHA address OTP resend issue

Health ID
#1

Hi Team,

During testing we have observed that during ABHA address creation if we choose AADHAAR OTP mode
then we get the OTP and we can verify it, but using same transaction id we can again call resend OTP API and verify it again. As transaction ID is already verified, it should not be consumed after that.

#2

hi @cloops_ashutosh,

please tell me the Environment so we can further replicate the issue

Thanks & Regards
Areeb

#3

Its happing in sandbox environment, during our security testing team found this issue.