Support regarding API for ABHA address recovery?

Hi @IntegrationSupport team,
We are building the PHR Application and we need support regarding API for ABHA address recovery.
As ABHA address recovery API is not listed here. So, we were asked to use APIs /v1/forgot/healthId/mobile/generateOtp & /v1/forgot/healthId/mobile for ABHA address recovery which are listed on ABHA Number Swaggerhub here. But, these APIs are returning the wrong ABHA address please have a look to attached screenshots for more info:
Mobile: 9347411526 & linked ABHA address with that mobile are:


/v1/forgot/healthId/mobile API is returning the ABHA address which is not linked/created with above mobile-

It should return any of the ABHA addresses out of [“testing.9347@sbx”, “testing13@sbx”, “testing11@sbx”, “testing14@sbx”, “abhishek.testing@sbx”,“testinggggggg14.surname@sbx”]

Now the questions are:

  1. Are these(/v1/forgot/healthId/mobile/generateOtp & /v1/forgot/healthId/mobile) right set of APIs to be used for ABHA address recovery?
  2. If yes, How these are working i.e. are these APIs ignoring the mobile number which is getting used and just matching on the basis of demographics and returning the first healthId?
  3. If these are not correct APIs to be used for ABHA address recovery, then please provide the right set of APIs?

Note: We are trying to cover the use case if a user does not have ABHA Number, he just has ABHA address and trying to use the PHR Application(as NDHM’s official sandbox PHR application can be used with just ABHA address even without ABHA Number).

@abhishek1.kamla In /v1/forgot/healthId/mobile there is one field “status”, I am passing it as empty { “status”:"" }, now it is working fine. Try this please.

@Areeb - can you please respond to this. JIRA also logged.

@abhishek1.kamla can you also share your sbx client id ?

Our SBX Client-Id is: SBX_001156

Also, using { “status”:"" } it’s returning correct if any of the healthIds which are created with that mobile are linked with ABHA Number, it’s returning that linked healthId. But in case if healthId is not linked with ABHA number then /v1/forgot/healthId/mobile API is not returning the correct healthId. Please have a look to screenshots attached below:
Mobile is 9760917883 and healthIds(PHR Address) created with this are below:


But /v1/forgot/healthId/mobile API is returning the healthId which is not created with this Mobile:

It should return any of the ABHA addresses out of [ “abhi1.9760@sbx”, “testing99@sbx”, “abhi2.9760@sbx” ] which are created with 9760917883.

Please confirm if these APIs works to recover the ABHA address if it’s not linked with ABHA Number @IntegrationSupport ?

Note: As said above, we are trying to cover the use case if a user does not have ABHA Number, he just has ABHA address and trying to use the PHR Application(as NDHM’s official sandbox PHR application can be used with just ABHA address even without ABHA Number).

hi @IntegrationSupport @abhishek1.kamla

1)v2/forgot/healthId/mobile/generateOtp

2)v2/forgot/healthId/mobile

Its working fine please check again

Thanks
Areeb

Hi @Areeb,
Yes, It works fine if your ABHA address is linked with your ABHA number(looks like these API are for ABHA Number recovery). For ABHA address which is not linked with ABHA number, it’s not returning the right ABHA address as you can see below:
Mobile Number: 9760917883 and ABHA address created with this mobile is ‘testing.9347@sbx’


API: /v2/forgot/healthId/mobile/generateOtp using 9760917883

And, /v2/forgot/healthId/mobile is returning the wrong healthId(phrAddress).

Also, please confirm if these are correct set of APIs to recover ABHA address(if it’s not linked with ABHA Number) @IntegrationSupport ?

hi @IntegrationSupport @abhishek1.kamla

curl --location ‘https://healthidsbx.abdm.gov.in/api/v2/forgot/healthId/mobile
–header ‘Accept: /
–header ‘Accept-Language: en-GB,en;q=0.6’
–header ‘Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJBbFJiNVdDbThUbTlFSl9JZk85ejA2ajlvQ3Y1MXBLS0ZrbkdiX1RCdkswIn0.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.X-OUN6s4G0vk5ZqAgGJ_sQzjcT1bHLlVs0i5NILT8Gkn_D9iZ3W_co5w_rCzjp4Rv99OPAcXaKFhfwMfzPX_rY713CpsG1qYJi2CrIPEBl7QzO65cPp5AAGTL1OiRET5PT0VHP60MdvhDfQobMoWqQPP9oE4xtZJToTZpOLUZ8Kw2_EbglUZksKCU0LUuPLveqLDeQrlyKiKdE40nr2IdBnbTjGlpKwKn7XxYsAQn3sQ_dj8-tcg8FLvnRtCYf5Y41v6QClgY56g6vAvAjshb_Gg3NAR8q8rr1p8Mfx08yThPnK0f9yoZweOZbLzLy9BQWGyANCbeeEOh4fmq4W8dA’
–header ‘Connection: keep-alive’
–header ‘Content-Type: application/json;charset=UTF-8’
–header ‘Cookie: TS01c078b5=01115a1c90d8d9724eeb1ff12494d855bbc3c571c4321d3fa958d5bd9e2ea5b770dcef9d5e564c66b325768fe0c2dece8a67affdd3; dtCookie=v_4_srv_1_sn_012338974BCAEAF9D67FFE17ED618F8E_perc_100000_ol_0_mul_1_app-3A50d081cd939ea4fe_1; TS01f9ef09=01445fed043416b3e608c2287b520f39a678b741180416c01b465d1fc2971bd3c808732786659f44cac953e7164765e868204af409; rxVisitor=16757484517992GIT32F596TL474ULJEDR0DTB3SSCOED; dtSa=-; rxvt=1679398084857|1679396283804; dtPC=1$596283794_544h-vLGNFAGUVEIFMRMATRAAGUEAAIQGLNMHJ-0e0; dtLatC=3’
–header ‘Origin: https://healthidsbx.abdm.gov.in
–header ‘Referer: https://healthidsbx.abdm.gov.in/login/recovery
–header ‘Sec-Fetch-Dest: empty’
–header ‘Sec-Fetch-Mode: cors’
–header ‘Sec-Fetch-Site: same-origin’
–header ‘Sec-GPC: 1’
–header ‘User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36’
–header ‘sec-ch-ua: “Brave”;v=“111”, “Not(A:Brand”;v=“8”, “Chromium”;v=“111”’
–header ‘sec-ch-ua-mobile: ?0’
–header ‘sec-ch-ua-platform: “Windows”’
–data ‘{
“gender”: “M”,
“dayOfBirth”: 13,
“monthOfBirth”: 12,
“yearOfBirth”: “1994”,
“firstName”: “mohd”,
“middleName”: “arib”,
“lastName”: “choudhary”,
“name”: “mohd arib choudhary”,
“otp”: “031144”,
“txnId”: “a4a76803-b8dd-46fd-b776-e63814642402”
}’

please this curl or request

its working fine