OTP encryption is not getting accepted in PHR Service APIs

#1

https://dev.abdm.gov.in/cm/v1/apps/phrAddress/auth-confirm API is not accepting the OTP(encrypted), throwing 400 response as you can see in attached screenshot. What are the guidelines to encrypt the sensitive parameters for PHR Service APIs
(We are getting the public certificate from https://healthidsbx.abdm.gov.in/api/v1/auth/cert and using this certificate to encrypt the OTP and the providing that encrypted OTP in /auth-confirm API but it’s not working. Same encryption is working in HealthId Service APIs)

Screenshot 2022-05-03 at 1.00.30 PM
Screenshot 2022-05-03 at 1.00.30 PM2750×1278 432 KB

API encryption issue in P1(PHR API)
#2

@Shubhanshu_Shukla @neha.parnami
We are also facing the same issue.

#3

Hey, looks like we have to use this API to fetch token for PHR service’s APIs encryption, below is working for me @shubham.nakawe -
https://phrsbx.abdm.gov.in/api/v1/phr/public/certificate

2 Likes
#4

Where is this documented? How were you able to find this?

#5

Agreed, very poor documentation. I was able to figure this out by observing abdm PHR App flow.

#6

Thank you for helping @abhishek1.kamla

#7

Can you please link the flow you are referring to
TIA