ABDM M1/M2/M3 Live Testing Log

# Internal: we already have a backend service that fetches gateway tokens
# Use rails console: Phr::FetchGatewayTokenV3.perform
# Or call ABDM directly (see /abha/api/v3/gateway/v3/wso2/auth/token if exposed)

# 1. Request OTP
curl -X POST https://dev.abdm.gov.in/abha/api/v3/phr/app/enrollment/request/otp \
  -H "Authorization: Bearer <GATEWAY_TOKEN>" \
  -H "REQUEST-ID: $(uuidgen)" \
  -H "TIMESTAMP: $(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)" \
  -H "Content-Type: application/json" \
  -d '{
    "scope": ["abha-address-enroll", "mobile-verify"],
    "loginHint": "mobile-number",
    "loginId": "<RSA-ENCRYPTED-MOBILE>",
    "otpSystem": "abdm"
  }'
# → returns { txnId, message }

# 2. Verify OTP (use txnId from step 1)
curl -X POST https://dev.abdm.gov.in/abha/api/v3/phr/app/enrollment/verify \
  -H "Authorization: Bearer <GATEWAY_TOKEN>" \
  -H "REQUEST-ID: $(uuidgen)" \
  -H "TIMESTAMP: $(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)" \
  -H "Content-Type: application/json" \
  -d '{
    "authData": {
      "authMethods": ["otp"],
      "otp": {
        "txnId": "<TXN_ID>",
        "otpValue": "<RSA-ENCRYPTED-OTP>"
      }
    },
    "scope": ["abha-address-enroll", "mobile-verify"]
  }'
# → returns NEW txnId for use in steps 3/4

# 3. Get ABHA address suggestions
curl -X GET "https://dev.abdm.gov.in/abha/api/v3/enrollment/enrol/suggestion" \
  -H "Authorization: Bearer <GATEWAY_TOKEN>" \
  -H "Transaction_Id: <TXN_ID>" \
  -H "REQUEST-ID: $(uuidgen)" \
  -H "TIMESTAMP: $(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)"
# → returns { txnId, abhaAddressList: [...] }

# 4. Enrol chosen ABHA address
curl -X POST https://dev.abdm.gov.in/abha/api/v3/enrollment/enrol/abha-address \
  -H "Authorization: Bearer <GATEWAY_TOKEN>" \
  -H "REQUEST-ID: $(uuidgen)" \
  -H "TIMESTAMP: $(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)" \
  -H "Content-Type: application/json" \
  -d '{
    "txnId": "<TXN_ID>",
    "abhaAddress": "<CHOSEN_ADDRESS>@sbx",
    "preferred": 1
  }'
# → returns success — ABHA account created

# 1. Request Aadhaar OTP
curl -X POST https://dev.abdm.gov.in/abha/api/v3/enrollment/request/otp \
  -H "Authorization: Bearer <GATEWAY_TOKEN>" \
  -H "REQUEST-ID: $(uuidgen)" \
  -H "TIMESTAMP: $(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)" \
  -H "Content-Type: application/json" \
  -d '{
    "txnId": null,
    "scope": ["abha-enrol"],
    "loginHint": "aadhaar",
    "loginId": "<RSA-ENCRYPTED-AADHAAR>",
    "otpSystem": "aadhaar"
  }'
# → returns { txnId, message }

# 2. Verify Aadhaar OTP + create ABHA (returns 14-digit number!)
curl -X POST https://dev.abdm.gov.in/abha/api/v3/enrollment/enrol/byAadhaar \
  -H "Authorization: Bearer <GATEWAY_TOKEN>" \
  -H "REQUEST-ID: $(uuidgen)" \
  -H "TIMESTAMP: $(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)" \
  -H "Content-Type: application/json" \
  -d '{
    "authData": {
      "authMethods": ["otp"],
      "otp": {
        "txnId": "<TXN_ID>",
        "otpValue": "<RSA-ENCRYPTED-OTP>",
        "mobile": "<USER_MOBILE_NOT_ENCRYPTED>"
      }
    },
    "consent": {
      "code": "abha-enrollment",
      "version": "1.4"
    }
  }'
# → returns NEW txnId, plus ABHA profile

# 3. (Only if mobile ≠ Aadhaar-linked mobile) verify mobile update
curl -X POST https://dev.abdm.gov.in/abha/api/v3/enrollment/auth/byAbdm \
  -H "Authorization: Bearer <GATEWAY_TOKEN>" \
  -H "REQUEST-ID: $(uuidgen)" \
  -H "TIMESTAMP: $(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)" \
  -H "Content-Type: application/json" \
  -d '{
    "scope": ["abha-enrol", "mobile-verify"],
    "authData": {
      "authMethods": ["otp"],
      "otp": {
        "txnId": "<TXN_ID>",
        "otpValue": "<RSA-ENCRYPTED-OTP>"
      }
    }
  }'

# 4. Suggest ABHA addresses
curl -X GET "https://dev.abdm.gov.in/abha/api/v3/enrollment/enrol/suggestion" \
  -H "Authorization: Bearer <GATEWAY_TOKEN>" \
  -H "Transaction_Id: <TXN_ID>" \
  -H "REQUEST-ID: $(uuidgen)" \
  -H "TIMESTAMP: $(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)"

# 5. Enrol chosen ABHA address
curl -X POST https://dev.abdm.gov.in/abha/api/v3/enrollment/enrol/abha-address \
  -H "Authorization: Bearer <GATEWAY_TOKEN>" \
  -H "REQUEST-ID: $(uuidgen)" \
  -H "TIMESTAMP: $(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)" \
  -H "Content-Type: application/json" \
  -d '{
    "txnId": "<TXN_ID>",
    "abhaAddress": "<CHOSEN_ADDRESS>@sbx",
    "preferred": 1
  }'

# Get profile details (14-digit ABHA number, name, DOB, etc.)
curl -X GET "https://dev.abdm.gov.in/abha/api/v3/profile/account" \
  -H "Authorization: Bearer <GATEWAY_TOKEN>" \
  -H "X-token: Bearer <X_TOKEN>" \
  -H "REQUEST-ID: $(uuidgen)" \
  -H "TIMESTAMP: $(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)"

# Download ABHA card image (PNG)
curl -X GET "https://dev.abdm.gov.in/abha/api/v3/profile/account/abha-card" \
  -H "Authorization: Bearer <GATEWAY_TOKEN>" \
  -H "X-Token: Bearer <X_TOKEN>" \
  -H "REQUEST-ID: $(uuidgen)" \
  -H "TIMESTAMP: $(date -u +%Y-%m-%dT%H:%M:%S.%3NZ)" \
  -o abha-card.png