Verification API
Get Started
Getting Started with Verification API via Postman:
FOR UAT ONLYGet UAT credentials and test data from GCash
- client_id
- client_secret
- AES key
- IV (From Customer Login)
Authorization
Request bearer token
POST https://access.lab.mynt.xyz/gconnect/oauth2/token
- Add
client_id
,client_secret
andgrant_type
under Body - Key value pairs must be in x-www-form-urlencoded
Set
grant_type
to client_credentials- Copy generated
access_token
valid for 5 minutes
- Copy generated
Proceed to Verification API /verifiers endpoint
GET https://access.lab.mynt.xyz/gconnect/verification/verifiers
- Add
access_token
under Authorization and set type to Bearer Token - Add
client_id
andX-Tracker
under HeadersX-Tracker
can be any alphanumeric value - Send GET request
Sample Request
curl --location --request GET 'https://access.lab.mynt.xyz/gconnect/verification/verifiers' \
--header 'X-Tracker: dummy-tracker' \
--header 'client_id: 54336d73e7f2445f9189a4de5a3950a1' \
--header 'Authorization: Bearer ooTsenytW1zxj89lG03fm2pVodxWUcrH'
Sample Response
[
{
"description": "GCash account exists",
"uri": "/verifiers/accounts/ewallet"
},
{
"description": "GCash account verified",
"uri": "/verifiers/accounts/ewallet/verified"
},
{
"description": "GCash profile age",
"uri": "/verifiers/age/profile"
}
]
Possible URI Endpoints
You are only given access to URIs based on the /verifiers response
- /verifiers/accounts/ewallet
- /verifiers/accounts/ewallet/verified
- /verifiers/age/account
- /verifiers/age/profile
Encrypt msisdn
- Use an encrypting service i.e: https://string-o-matic.com/aes-encrypt
- Use Input Type Text and key size 256
- Change Key source and IV source to Base64
- Add
AES key
andIV
- msisdn has now been encrypted!
- Done
POST /verifiers/accounts/ewallet
- Add
access_token
under Authorization and set type to Bearer Token - Add
client_id
andX-Tracker
under Headers - Add the encrypted
msisdn
andiv
under Body - Set Body to raw > JSON
Sample Request
curl --location --request POST 'https://access.lab.mynt.xyz/gconnect/verification/verifiers/accounts/ewallet' \
--header 'X-Tracker: dummy-tracker' \
--header 'client_id: 54336d73e7f2445f9189a4de5a3950a1' \
--header 'Authorization: Bearer ooTsenytW1zxj89lG03fm2pVodxWUcrH' \
--header 'Content-Type: application/json' \
--data-raw '{
"msisdn": "0CNJ/5Uod7JTWFE+CUVuAA==",
"iv": "HnHmSIA/m9BMbn6daIsnMQ=="
}'
Sample Response
{
"has_account": true
}
POST /verifiers/accounts/ewallet/verified
- Add
access_token
under Authorization and set type to Bearer Token - Add
client_id
andX-Tracker
under Headers - Add the encrypted
msisdn
andiv
under Body - Set Body to raw > JSON
Sample Request
curl --location --request POST 'https://access.lab.mynt.xyz/gconnect/verification/verifiers/accounts/ewallet/verified' \
--header 'client_id: 54336d73e7f2445f9189a4de5a3950a1' \
--header 'X-Tracker: dummy-tracker' \
--header 'Authorization: Bearer ooTsenytW1zxj89lG03fm2pVodxWUcrH' \
--header 'Content-Type: application/json' \
--data-raw '{
"msisdn": "0CNJ/5Uod7JTWFE+CUVuAA==",
"iv": "HnHmSIA/m9BMbn6daIsnMQ=="
}'
Sample Response
{
"verified_account": true
}
POST /verifiers/age/account
- Add
access_token
under Authorization and set type to Bearer Token - Add
client_id
andX-Tracker
under Headers Add the encrypted
msisdn
,iv
,value
, andoperator
under Bodyvalue
only takes an integer value whileoperator
is an enum and only takes any of these values:- lt
- gt
- lte
- gte
Set Body to raw > JSON
Sample Request
curl --location --request POST 'https://access.lab.mynt.xyz/gconnect/verification/verifiers/age/account' \
--header 'X-Tracker: dummy-tracker' \
--header 'client_id: 8b650420169e490085e1fb629cf4d562' \
--header 'Authorization: Bearer NuwG46aDG5bkC4JAtUVq80mzuCMULVFw' \
--header 'Content-Type: application/json' \
--data-raw '{
"msisdn": "0CNJ/5Uod7JTWFE+CUVuAA==",
"iv": "HnHmSIA/m9BMbn6daIsnMQ==",
"value": 10,
"operator": "gt"
}'
Sample Response
{
"value": 10,
"operator": "gt",
"result": true
}
POST /verifiers/age/profile
- Add
access_token
under Authorization and set type to Bearer Token - Add
client_id
andX-Tracker
under Headers Add the encrypted
msisdn
,iv
, andoperator
under Bodyoperator
is an enum and only takes any of these values:- lt
- gt
- lte
- gte
Set Body to raw > JSON
Sample Request
curl --location --request POST 'https://access.lab.mynt.xyz/gconnect/verification/verifiers/age/profile' \
--header 'X-Tracker: dummy-tracker' \
--header 'client_id: 54336d73e7f2445f9189a4de5a3950a1' \
--header 'Authorization: Bearer NuwG46aDG5bkC4JAtUVq80mzuCMULVFw' \
--header 'Content-Type: application/json' \
--data-raw '{
"msisdn": "0CNJ/5Uod7JTWFE+CUVuAA==",
"iv": "HnHmSIA/m9BMbn6daIsnMQ==",
"operator": "lt"
}'
Sample Response
{
"value": 18,
"operator": "lt",
"result": false
}
Important links:
- Bearer token
https://access.lab.mynt.xyz/gconnect/oauth2/token
- Customer login
https://access.lab.mynt.xyz/gconnect/customer/login
- Verifiers
https://access.lab.mynt.xyz/gconnect/verification/verifiers
- AES encrypt tool
https://string-o-matic.com/aes-encrypt