Healthid creation by other document (Otp verification failed)

[sukhdeo007]

Always getting wrong otp response for https://healthidsbx.abdm.gov.in/api/v2/document/verify/mobile/otp
even though i entered correct Otp and transaction
I’m not able to able to understand.
here i’m sharing curl

curl -X POST
https://healthidsbx.abdm.gov.in/api/v2/document/verify/mobile/otp
-H ‘accept: /’
-H ‘accept-language: en-US’
-H ‘authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJBbFJiNVdDbThUbTlFSl9JZk85ejA2ajlvQ3Y1MXBLS0ZrbkdiX1RCdkswIn0.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.OqDpQVzevS9j0Nshqfz6NBRbbvbA9WVoQk1jPtD4qNwMe1G5i2xMmIwHjuEk1SEG4Q7425ch92JGNsfSOwZJ4-CzykeaoTkPkkD5dUP5kBrT9PvXnWsCRDXAHwzTVNkmeTiKT7GJOz3YNBXO1rT2VqxYqYpWS18BzedxyhaCv4k4vlw38KChVNxyIG98rx48JHZcJAeNxcD6qzKSgGDKmsyQehHmlyiZSpkRighQ-ccrCXXrxY3-OWn9xLNb-agAmAk_bQ9i8prMdG7s_MKMWev-OO6RwNir5DiKBRf9M82dTV0ef2PtHm4tORXh2TAHMinQxCXqAK5revZJCcpD-A’
-H ‘cache-control: no-cache’
-H ‘content-type: application/json’
-H ‘postman-token: 7ded35a9-4f6a-c6c6-e1b4-1761c8327d42’
-d ‘{
“otp”: “600701”,
“txnId”: “07a13f63-add0-45c8-ae41-d2ba36b8fbfc”
}’

[akshay.pal]

@VSrinivas kindly look into it.

[VSrinivas]

Hi @sukhdeo007,

“https://healthidsbx.abdm.gov.in/api/v2/document/verify/mobile/otp” API working fine.
Please enter OTP as “encrypted” format.

Please find below Curl

curl --location --request POST ‘https://healthidsbx.abdm.gov.in/api/v2/document/verify/mobile/otp’
–header ‘Accept-Language: en-US’
–header ‘Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJBbFJiNVdDbThUbTlFSl9JZk85ejA2ajlvQ3Y1MXBLS0ZrbkdiX1RCdkswIn0.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.BgEil-eHaM-CJ8oVv1PRYU4f9WFOxUYBrwA2ze2afT3-cOF5mroaEbPyjd2E1YgqPJzjfTqoNcWDrYE0Fwlzi62SfkOU7P2zyI_zRcJXok5M3Jii6Ukrv9PmAtWMxx9CLPFzEKpXu6ls7tC9XfC801ruzZYZgs-xiyves1uwl71dhSUi_8W8fKpg39FrF4CDgo17HcggDk7khMJWUSicfuU7EbUozkNKy2yU9TI1e4JyjZ8LpXRoTuG_PML-hg3NpoqFFoXf1A0wF9Lbvr6jd9Stne5Yb_9nuUEEHO6UUYWpkYct6zdS-P9Wzrkx8bDje47NzM_qDZ6Vju_JDOdNsw’
–header ‘Content-Type: application/json’
–header ‘Cookie: TS01c078b5=01115a1c90a8ea47d5fff55b4d6f2f835a066b6bb67b117bd69f0248163ddbb80efe102a2e117acf0be63e26e83b9c1aa3ad4d226c’
–data-raw ‘{
“otp”: “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”,
“txnId”: “8ad391bf-604e-435a-a42c-24df0fc2af88”
}’

[mohdmaroof]

@VSrinivas

encrypted

@VSrinivas witch method you use to convert to OTP in “encrypted”

[anchal2909]

Hi @mohdmaroof , For v2 APIs ,Data is encrypted using public certificate . This public key can be downloaded from the /v1/auth/cert API.
https://app.swaggerhub.com/apis-docs/abdm.abha/abha-service/1.0#/

And for RSA Encryption to encrypt the data ,you can use below online tool .

Online RSA Encryption, Decryption And Key Generator Tool | Devglan

[VSrinivas]

Hi @mohdmaroof,

While hitting the below API generated PUBLIC KEY
https://healthidsbx.abdm.gov.in/api/v1/auth/cert
then get that PUBLIC KEY and paste here https://www.devglan.com/online-tools/rsa-encryption-decryption.

curl --location --request GET ‘https://healthidsbx.abdm.gov.in/api/v1/auth/cert’
–header ‘Cookie: TS01c078b5=01115a1c90e3fa83a72ecef0a11d0bd20ce76dda3adf44983ea7bcff589cc73ffa39848ba4d0043a69559a9c8416fb1b0e0c242932’

Encrypted Output means Encrypted OTP

[mohdmaroof]

@VSrinivas @anchal2909
I’am try this method but it’s not propper work Encrypted Output copy and then paste to api OTP but it not send token.
Please help me

[anchal2909]

@mohdmaroof , what is the challenge you are facing while encrypting OTP ?
You simply need to put OTP in plain text , get public key/private key from /v1/auth/cert api and Encrypt it . You’ll get the encrypted OTP as result of Encrypted Output (Base64).
Kindly follow the screenshots shared by VSrinivas.

[mohdmaroof]

i will try this but is not send the token please check my screenshot
i enter a plan text (123456)
and paste public key
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

and i get a encryted output (Base 64) then i copy output and pest to otp like this
{
“otp”: “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”,
“txnId”: {{txnId}}
}

so i get a error like this
{
“code”: “HIS-500”,
“message”: “An unexpected error has occured. Please try again in sometime.”,
“details”: null
}

[mohdmaroof]

@anchal2909 @VSrinivas
I’am receive responce code 200 but i got this type error

[maroof]

@VSrinivas Please help me i am not able to solve this issue, i am creating encrypted OTP but i do not get the token but i receive responce code 200

[VSrinivas]

Hi @maroof,

Please mention txnId.

[maroof]

@VSrinivas Thankyou i get the token,
but can you explane me how to convert OTP in flutter code