Generate OTP via Email: API Reference Guide

Generate OTP

curl --request POST \
  --url https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "UniquerefID": "jane.doe@example.com",
  "SourceAddress": "192.168.1.1",
  "SourceCode": 1,
  "OtpType": "FORGOTPWD",
  "ProgramId": 19,
  "RelationType": 4
}
'

import requests

url = "https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP"

payload = {
    "UniquerefID": "jane.doe@example.com",
    "SourceAddress": "192.168.1.1",
    "SourceCode": 1,
    "OtpType": "FORGOTPWD",
    "ProgramId": 19,
    "RelationType": 4
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    UniquerefID: 'jane.doe@example.com',
    SourceAddress: '192.168.1.1',
    SourceCode: 1,
    OtpType: 'FORGOTPWD',
    ProgramId: 19,
    RelationType: 4
  })
};

fetch('https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'UniquerefID' => 'jane.doe@example.com',
    'SourceAddress' => '192.168.1.1',
    'SourceCode' => 1,
    'OtpType' => 'FORGOTPWD',
    'ProgramId' => 19,
    'RelationType' => 4
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP"

	payload := strings.NewReader("{\n  \"UniquerefID\": \"jane.doe@example.com\",\n  \"SourceAddress\": \"192.168.1.1\",\n  \"SourceCode\": 1,\n  \"OtpType\": \"FORGOTPWD\",\n  \"ProgramId\": 19,\n  \"RelationType\": 4\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"UniquerefID\": \"jane.doe@example.com\",\n  \"SourceAddress\": \"192.168.1.1\",\n  \"SourceCode\": 1,\n  \"OtpType\": \"FORGOTPWD\",\n  \"ProgramId\": 19,\n  \"RelationType\": 4\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"UniquerefID\": \"jane.doe@example.com\",\n  \"SourceAddress\": \"192.168.1.1\",\n  \"SourceCode\": 1,\n  \"OtpType\": \"FORGOTPWD\",\n  \"ProgramId\": 19,\n  \"RelationType\": 4\n}"

response = http.request(request)
puts response.read_body

{
  "results": {
    "IsSucessful": true,
    "ErrorCode": "000",
    "ExceptionMessage": "Success",
    "ReturnObject": true,
    "Count": 0
  }
}

POST

lbms-ingress

member

api

Member

GenerateOTP

Generate OTP

curl --request POST \
  --url https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "UniquerefID": "jane.doe@example.com",
  "SourceAddress": "192.168.1.1",
  "SourceCode": 1,
  "OtpType": "FORGOTPWD",
  "ProgramId": 19,
  "RelationType": 4
}
'

import requests

url = "https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP"

payload = {
    "UniquerefID": "jane.doe@example.com",
    "SourceAddress": "192.168.1.1",
    "SourceCode": 1,
    "OtpType": "FORGOTPWD",
    "ProgramId": 19,
    "RelationType": 4
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    UniquerefID: 'jane.doe@example.com',
    SourceAddress: '192.168.1.1',
    SourceCode: 1,
    OtpType: 'FORGOTPWD',
    ProgramId: 19,
    RelationType: 4
  })
};

fetch('https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'UniquerefID' => 'jane.doe@example.com',
    'SourceAddress' => '192.168.1.1',
    'SourceCode' => 1,
    'OtpType' => 'FORGOTPWD',
    'ProgramId' => 19,
    'RelationType' => 4
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP"

	payload := strings.NewReader("{\n  \"UniquerefID\": \"jane.doe@example.com\",\n  \"SourceAddress\": \"192.168.1.1\",\n  \"SourceCode\": 1,\n  \"OtpType\": \"FORGOTPWD\",\n  \"ProgramId\": 19,\n  \"RelationType\": 4\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"UniquerefID\": \"jane.doe@example.com\",\n  \"SourceAddress\": \"192.168.1.1\",\n  \"SourceCode\": 1,\n  \"OtpType\": \"FORGOTPWD\",\n  \"ProgramId\": 19,\n  \"RelationType\": 4\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTP")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"UniquerefID\": \"jane.doe@example.com\",\n  \"SourceAddress\": \"192.168.1.1\",\n  \"SourceCode\": 1,\n  \"OtpType\": \"FORGOTPWD\",\n  \"ProgramId\": 19,\n  \"RelationType\": 4\n}"

response = http.request(request)
puts response.read_body

{
  "results": {
    "IsSucessful": true,
    "ErrorCode": "000",
    "ExceptionMessage": "Success",
    "ReturnObject": true,
    "Count": 0
  }
}

Triggers an OTP to be sent to a member’s registered delivery channel (SMS or email, as configured for your program), identified by their email address. Use this for login, password reset, account activation, or two-factor authentication flows. The OtpType parameter controls which template and expiry rules apply. If you have the member’s RelationReference (CID) rather than their email, the preferred flow is Generate OTP by Relation Reference.

OtpType Values

Value	Use Case
`ACTIVATION`	Account activation after registration
`LOGIN`	Member login via OTP
`FORGOTPWD`	Forgot password — initiate reset
`CHANGEPASSWORD`	Change password (member is logged in)
`RESETPASSWORD`	Reset password (admin-triggered)
`FORGOTUSERNAME`	Forgot username recovery
`TwoFA`	Two-factor authentication
`UNBLOCKMEMBER`	Unblock a locked member account
`NONE`	No specific type
`CASHBACKCONFIRM`	Cashback transaction confirmation
`POINTTRANSFERCONFIRM`	Points transfer confirmation
`FAMILYPOOLINGMERGE`	Family pooling account merge confirmation
`FAMILYPOOLINGUNMERGE`	Family pooling account unmerge confirmation
`AIRREVIEWNCONFIRM`	Air booking review confirmation
`DOMESTICFLIGHTREVIEWNCONFIRM`	Domestic flight booking confirmation
`HOTELREVIEWNCONFIRM`	Hotel booking review confirmation
`CARREVIEWNCONFIRM`	Car booking review confirmation
`GIFTCARDREVIEWNCONFIRM`	Gift card review confirmation
`PACKAGEREVIEWNCONFIRM`	Package booking review confirmation
`SHOPREVIEWNCONFIRM`	Shop purchase review confirmation
`SHOPDIGITALREVIEWNCONFIRM`	Digital shop review confirmation
`MERCHANTREVIEWNCONFIRM`	Merchant review confirmation
`ISPREVIEWNCONFIRM`	ISP review confirmation
`INSURANCEREVIEWNCONFIRM`	Insurance review confirmation

OTP delivery channel (email or SMS), expiry duration, and maximum attempt limits are all configurable at the program level in Loyalife Admin. Confirm these values with your Xoxoday implementation contact so your UI timers and lockout handling match the actual configuration.

Responses

200 — Success

Path	Type	Description
`results.IsSucessful`	boolean	`true`
`results.ErrorCode`	string	`000`
`results.ExceptionMessage`	string	`Success`
`results.ReturnObject`	boolean	`true` when OTP is sent
`results.Count`	integer	Always `0`

After a successful response, verify the OTP with Verify OTP.

Authorizations

Authorization

string

header

required

JWT obtained from Generate Auth Token. Pass as Authorization: bearer {token}.

Body

application/json

UniquerefID

string

required

The member's email address

Example:

"jane.doe@example.com"

SourceAddress

string

required

IP address of the requesting system

Example:

"192.168.1.1"

SourceCode

enum<integer>

required

Origin: 1=Web, 2=Mobile, 3=Email, 4=Service

Available options:

1,

2,

3,

4

Example:

1

OtpType

enum<string>

required

Purpose of the OTP. Must match between Generate and Verify calls.

Available options:

ACTIVATION,

LOGIN,

FORGOTPWD,

CHANGEPASSWORD,

RESETPASSWORD,

FORGOTUSERNAME,

TwoFA,

UNBLOCKMEMBER,

NONE,

CASHBACKCONFIRM,

POINTTRANSFERCONFIRM,

FAMILYPOOLINGMERGE,

FAMILYPOOLINGUNMERGE,

AIRREVIEWNCONFIRM,

DOMESTICFLIGHTREVIEWNCONFIRM,

HOTELREVIEWNCONFIRM,

CARREVIEWNCONFIRM,

GIFTCARDREVIEWNCONFIRM,

PACKAGEREVIEWNCONFIRM,

SHOPREVIEWNCONFIRM,

SHOPDIGITALREVIEWNCONFIRM,

MERCHANTREVIEWNCONFIRM,

ISPREVIEWNCONFIRM,

INSURANCEREVIEWNCONFIRM

Example:

"LOGIN"

ProgramId

integer

required

Example:

19

RelationType

integer

required

Use 4 for customers

Example:

4

Response

200 - application/json

OTP sent

⌘I

Overview

Core Concepts

Authentication

Member Management

OTP

Transactions

Points Redemption

Generate OTP

OtpType Values

Responses

Authorizations

Body

Response

​OtpType Values

​Responses

Authorizations

Body

Response

OtpType Values

Responses