Login via Face Auth (QR) - verify

Completes login through the face-auth QR / ABHA-app flow.

POST/abha/api/v3.1/profile/login/verify

First call Face auth - generate transaction ID (init), then poll Face auth - capture PID / track status until COMPLETE. Then send the same txnId here. Returns the user X-token (token).

Endpoint: POST /abha/api/v3.1/profile/login/verify

Flow: Login - Face Auth QR (v3.1) - step 3 of 3

Previous: Face auth - capture PID / track status
Next: none (last call of this flow)

Headers (plus Authorization: Bearer <gateway token>):

Header	Required	Description
REQUEST-ID	yes	Unique UUID for every request.
TIMESTAMP	yes	Current UTC timestamp in ISO-8601 format.

Request body for this use case:

Field	Value / Type	Required	Description
`scope`	`["ABHA-login", "Aadhaar-face-login-verify"]`	yes	Scope that selects this use case. Send exactly the values listed for this API.
`authData`	object	yes	Authentication payload for this use case.
`authData.authMethods`	`["face_auth"]`	yes	Authentication method used in this step.
`authData.face_login`	object	yes	Face login block (v3.1).
`authData.face_login.txnId`	string	yes	Transaction ID returned by the previous step of this flow.
`authData.face_login.aadhaar`	string	yes	Aadhaar number, RSA-encrypted.

Note: This API is only in the Postman collection (v3.1).

Responses

200

Success: Positive flow

authResultstring

messagestring

tokenstring

expiresIninteger

refreshTokenstring

refreshExpiresIninteger

accountsobject[]

accounts.ABHANumberstring

accounts.preferredAbhaAddressstring

accounts.namestring

accounts.statusstring

accounts.profilePhotostring

400

Bad Request (request validation failed).

Error codes for this module

401

Unauthorized (invalid / expired gateway token, X-token or benefit access): Invalid Credentials (generic)

Everything returns 401

codestring

descriptionstring

messagestring

404

Not Found: User Not Found; Resource Not Found

Error codes for this module

errorobject

error.codestring

error.messagestring

500

Internal Server Error.

Error codes for this module

curl --request POST \
  --url https://abhasbx.abdm.gov.in/abha/api/v3.1/profile/login/verify \
  --header 'Authorization: Bearer <ACCESS_TOKEN_FROM_SESSIONS_CALL>' \
  --header 'REQUEST-ID: 18235d89-cb13-479d-ad71-7a57d5f669a8' \
  --header 'TIMESTAMP: 2022-10-06T15:10:00.587Z' \
  --header 'Content-Type: application/json' \
  --data '{
  "scope": [
    "abha-login",
    "aadhaar-face-login-verify"
  ],
  "authData": {
    "authMethods": [
      "face_auth"
    ],
    "face_login": {
      "txnId": "8220299c-40ad-40b6-bc52-13a7d46a69d0",
      "aadhaar": "{{encrypted aadhaar number}}"
    }
  }
}'

{
  "txnId": "ad0aff4b-77dc-48c0-9c4a-18ac4f13af49",
  "authResult": "success",
  "message": "FACE verified successfully",
  "token": "<TOKEN>...",
  "expiresIn": 1800,
  "refreshToken": "<TOKEN>...",
  "refreshExpiresIn": 1296000,
  "accounts": [
    {
      "ABHANumber": "<ABHA_NUMBER>",
      "preferredAbhaAddress": "<ABHA_ADDRESS>",
      "name": "<NAME>",
      "status": "ACTIVE",
      "profilePhoto": "{{base64 profile photo}}"
    }
  ]
}