Verify OTP for Rupay Card API

The Verify OTP for Rupay Card API is used to validate OTP that is received by customer in the Seamless flow. The OTP, you must validate the OTP generated using the Generate OTP for Rupay Card API.

Endpoint


Production	https://pginstance/authentication/api/v1/verifyOtp
Test	https://areionsbi.pc.enstage-sas.com/authentication/api/v1/verifyOtp

Sample request

curl -X POST https://areionsbi.pc.enstage-sas.com/authentication/api/v1/verifyOtp\
-H "Content-Type: application/json" \
-H "pgInstanceId: 720200" \
-d '{
  "header": {
    "version": "1.0.0.0",
    "pgInstanceId":"72702415",
    "x-api-key": "AF165FBD-4E85-4c66-BEB1C54DC16CD48B"
  },
  "body": {
    "pgInstanceId":"72702415",
    "merchantId":"12345678",
    "merchantRefernceNo":"dafa34",
    "otp":"108434",
    "pgTransactionId":"1232324df"
  }
}'

Response parameters

Parameter	M/O/C	Type & Size	Description	Example
status	M	N(5)	Transaction Status	success or failed
validityPeriod	C	N(2)	The validity of the OTP in minutes for this transaction. Any newly generated OTP for the same transaction will automatically invalidate the old OTPs.	00 to 30
errorcode	M	N(1-4)	This is a numeric code used to provide success or failure response.	0 = No Error. For the complete list of error codes, refer to PG Error Codes.
errormsg	C	AN(0-1024)	Description for the error code.	For the complete list of error codes with message, refer to Error codes sub.
pgTransactionId	C	N(1-8)	Sale ID	860

Sample response

{
    "authResponseCode": "ACCU000",
    "pgTransactionId": "26443014",
    "status": "success",
    "tranCtxId": "100122024103000000000000430451",
    "errorcode": "00",
    "errormsg": ""
}

Error codes

Error Code	Description	Reference
00	Request was successful.
01	Missing Parameter	BEPG will check all the parameters and if any of the required parameter is not present then return this error code.
07	Invalid Parameter	BEPG checks all parameters and if any parameter is not as per specs and it will decline with this error code.
13	Amount Error	If amount value send by PG is not greater than 0 then BEPG will decline with this error code.
406	Not Authenticated	Credentials mismatch. Invalid credentials or not able to validate the signature/hash of the request.
407	Not Authorized	BEPG checks for credentials and source IP and if source IP is not from whitelisted IP addresses, then BEPG will return this error code.
450	Invalid OTP	Invalid OTP. OTP Authentication failed.
451	Expired OTP	The OTP has expired. User must ask for a fresh OTP.
452	Exhausted OTP verification	OTP verification count exhausted for this transaction. User must initiate a new transaction.
501	EMI Not available	EMI program is not available for the given card bin.
502	Amount not eligible for EMI	EMI program available for the given card bin but the amount is not eligible for EMI conversion.
503	Card not eligible for EMI	EMI program available for the given card bin but the card is not eligible (issuer rejection)