Verification API

(0 reviews)

Get Started

Getting Started with Verification API via Postman:

FOR UAT ONLY

Get UAT credentials and test data from GCash

  • client_id
  • client_secret
  • AES key
  • IV (From Customer Login)

Authorization

Request bearer token

POST https://access.lab.mynt.xyz/gconnect/oauth2/token
  1. Add client_id, client_secret and grant_type under Body
  2. Key value pairs must be in x-www-form-urlencoded
  3. Set grant_type to client_credentials

    • Copy generated access_token valid for 5 minutes

Proceed to Verification API /verifiers endpoint

GET https://access.lab.mynt.xyz/gconnect/verification/verifiers
  1. Add access_token under Authorization and set type to Bearer Token
  2. Add client_id and X-Tracker under HeadersX-Tracker can be any alphanumeric value
  3. Send GET request
Sample Request
curl --location --request GET 'https://access.lab.mynt.xyz/gconnect/verification/verifiers' \
--header 'X-Tracker: dummy-tracker' \
--header 'client_id: 54336d73e7f2445f9189a4de5a3950a1' \
--header 'Authorization: Bearer ooTsenytW1zxj89lG03fm2pVodxWUcrH'
Sample Response
[
    {
        "description": "GCash account exists",
        "uri": "/verifiers/accounts/ewallet"
    },
    {
        "description": "GCash account verified",
        "uri": "/verifiers/accounts/ewallet/verified"
    },
    {
        "description": "GCash profile age",
        "uri": "/verifiers/age/profile"
    }
]

Possible URI Endpoints

You are only given access to URIs based on the /verifiers response

  • /verifiers/accounts/ewallet
  • /verifiers/accounts/ewallet/verified
  • /verifiers/age/account
  • /verifiers/age/profile

Encrypt msisdn

  1. Use an encrypting service i.e: https://string-o-matic.com/aes-encrypt
  2. Use Input Type Text and key size 256
  3. Change Key source and IV source to Base64
  4. Add AES key and IV
  5. msisdn has now been encrypted!
  6. Done

POST /verifiers/accounts/ewallet

  1. Add access_token under Authorization and set type to Bearer Token
  2. Add client_id and X-Tracker under Headers
  3. Add the encrypted msisdn and iv under Body
  4. Set Body to raw > JSON
Sample Request
curl --location --request POST 'https://access.lab.mynt.xyz/gconnect/verification/verifiers/accounts/ewallet' \
--header 'X-Tracker: dummy-tracker' \
--header 'client_id: 54336d73e7f2445f9189a4de5a3950a1' \
--header 'Authorization: Bearer ooTsenytW1zxj89lG03fm2pVodxWUcrH' \
--header 'Content-Type: application/json' \
--data-raw '{
    "msisdn": "0CNJ/5Uod7JTWFE+CUVuAA==",
    "iv": "HnHmSIA/m9BMbn6daIsnMQ=="
}'
Sample Response
{
    "has_account": true
}

POST /verifiers/accounts/ewallet/verified

  1. Add access_token under Authorization and set type to Bearer Token
  2. Add client_id and X-Tracker under Headers
  3. Add the encrypted msisdn and iv under Body
  4. Set Body to raw > JSON
Sample Request
curl --location --request POST 'https://access.lab.mynt.xyz/gconnect/verification/verifiers/accounts/ewallet/verified' \
--header 'client_id: 54336d73e7f2445f9189a4de5a3950a1' \
--header 'X-Tracker: dummy-tracker' \
--header 'Authorization: Bearer ooTsenytW1zxj89lG03fm2pVodxWUcrH' \
--header 'Content-Type: application/json' \
--data-raw '{
    "msisdn": "0CNJ/5Uod7JTWFE+CUVuAA==",
    "iv": "HnHmSIA/m9BMbn6daIsnMQ=="
}'
Sample Response
{
    "verified_account": true
}

POST /verifiers/age/account

  1. Add access_token under Authorization and set type to Bearer Token
  2. Add client_id and X-Tracker under Headers
  3. Add the encrypted msisdn, iv, value, and operator under Body

    • value only takes an integer value while operator is an enum and only takes any of these values:
      • lt
      • gt
      • lte
      • gte
  4. Set Body to raw > JSON

Sample Request
curl --location --request POST 'https://access.lab.mynt.xyz/gconnect/verification/verifiers/age/account' \
--header 'X-Tracker: dummy-tracker' \
--header 'client_id: 8b650420169e490085e1fb629cf4d562' \
--header 'Authorization: Bearer NuwG46aDG5bkC4JAtUVq80mzuCMULVFw' \
--header 'Content-Type: application/json' \
--data-raw '{
    "msisdn": "0CNJ/5Uod7JTWFE+CUVuAA==",
    "iv": "HnHmSIA/m9BMbn6daIsnMQ==",
    "value": 10,
    "operator": "gt"
}'
Sample Response
{
    "value": 10,
    "operator": "gt",
    "result": true
}

POST /verifiers/age/profile

  1. Add access_token under Authorization and set type to Bearer Token
  2. Add client_id and X-Tracker under Headers
  3. Add the encrypted msisdn, iv, and operator under Body

    • operator is an enum and only takes any of these values:
      • lt
      • gt
      • lte
      • gte
  4. Set Body to raw > JSON

Sample Request
curl --location --request POST 'https://access.lab.mynt.xyz/gconnect/verification/verifiers/age/profile' \
--header 'X-Tracker: dummy-tracker' \
--header 'client_id: 54336d73e7f2445f9189a4de5a3950a1' \
--header 'Authorization: Bearer NuwG46aDG5bkC4JAtUVq80mzuCMULVFw' \
--header 'Content-Type: application/json' \
--data-raw '{
    "msisdn": "0CNJ/5Uod7JTWFE+CUVuAA==",
    "iv": "HnHmSIA/m9BMbn6daIsnMQ==",
    "operator": "lt"
}'
Sample Response
{
    "value": 18,
    "operator": "lt",
    "result": false
}
  • Bearer token
https://access.lab.mynt.xyz/gconnect/oauth2/token
  • Customer login
    https://access.lab.mynt.xyz/gconnect/customer/login
  • Verifiers
    https://access.lab.mynt.xyz/gconnect/verification/verifiers
  • AES encrypt tool
    https://string-o-matic.com/aes-encrypt


Reviews