Generate OTP by Relation Reference (CID)

Generate OTP by Relation Reference

curl --request POST \
  --url https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "UniquerefID": "jane.doe@example.com",
  "SourceCode": 1,
  "SourceAddress": "192.168.1.1",
  "OtpType": "LOGIN",
  "ProgramId": 19,
  "RelationType": 4
}
'

import requests

url = "https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference"

payload = {
    "UniquerefID": "jane.doe@example.com",
    "SourceCode": 1,
    "SourceAddress": "192.168.1.1",
    "OtpType": "LOGIN",
    "ProgramId": 19,
    "RelationType": 4
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    UniquerefID: 'jane.doe@example.com',
    SourceCode: 1,
    SourceAddress: '192.168.1.1',
    OtpType: 'LOGIN',
    ProgramId: 19,
    RelationType: 4
  })
};

fetch('https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'UniquerefID' => 'jane.doe@example.com',
    'SourceCode' => 1,
    'SourceAddress' => '192.168.1.1',
    'OtpType' => 'LOGIN',
    'ProgramId' => 19,
    'RelationType' => 4
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference"

	payload := strings.NewReader("{\n  \"UniquerefID\": \"jane.doe@example.com\",\n  \"SourceCode\": 1,\n  \"SourceAddress\": \"192.168.1.1\",\n  \"OtpType\": \"LOGIN\",\n  \"ProgramId\": 19,\n  \"RelationType\": 4\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"UniquerefID\": \"jane.doe@example.com\",\n  \"SourceCode\": 1,\n  \"SourceAddress\": \"192.168.1.1\",\n  \"OtpType\": \"LOGIN\",\n  \"ProgramId\": 19,\n  \"RelationType\": 4\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"UniquerefID\": \"jane.doe@example.com\",\n  \"SourceCode\": 1,\n  \"SourceAddress\": \"192.168.1.1\",\n  \"OtpType\": \"LOGIN\",\n  \"ProgramId\": 19,\n  \"RelationType\": 4\n}"

response = http.request(request)
puts response.read_body

{
  "results": {
    "IsSucessful": true,
    "ErrorCode": "000",
    "ExceptionMessage": "Success",
    "ReturnObject": true,
    "Count": 0
  }
}

POST

lbms-ingress

member

api

Member

GenerateOTPByRelationReference

Generate OTP by Relation Reference

curl --request POST \
  --url https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "UniquerefID": "jane.doe@example.com",
  "SourceCode": 1,
  "SourceAddress": "192.168.1.1",
  "OtpType": "LOGIN",
  "ProgramId": 19,
  "RelationType": 4
}
'

import requests

url = "https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference"

payload = {
    "UniquerefID": "jane.doe@example.com",
    "SourceCode": 1,
    "SourceAddress": "192.168.1.1",
    "OtpType": "LOGIN",
    "ProgramId": 19,
    "RelationType": 4
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    UniquerefID: 'jane.doe@example.com',
    SourceCode: 1,
    SourceAddress: '192.168.1.1',
    OtpType: 'LOGIN',
    ProgramId: 19,
    RelationType: 4
  })
};

fetch('https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'UniquerefID' => 'jane.doe@example.com',
    'SourceCode' => 1,
    'SourceAddress' => '192.168.1.1',
    'OtpType' => 'LOGIN',
    'ProgramId' => 19,
    'RelationType' => 4
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference"

	payload := strings.NewReader("{\n  \"UniquerefID\": \"jane.doe@example.com\",\n  \"SourceCode\": 1,\n  \"SourceAddress\": \"192.168.1.1\",\n  \"OtpType\": \"LOGIN\",\n  \"ProgramId\": 19,\n  \"RelationType\": 4\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"UniquerefID\": \"jane.doe@example.com\",\n  \"SourceCode\": 1,\n  \"SourceAddress\": \"192.168.1.1\",\n  \"OtpType\": \"LOGIN\",\n  \"ProgramId\": 19,\n  \"RelationType\": 4\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://loyalife-api.xoxoday.in/lbms-ingress/member/api/Member/GenerateOTPByRelationReference")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"UniquerefID\": \"jane.doe@example.com\",\n  \"SourceCode\": 1,\n  \"SourceAddress\": \"192.168.1.1\",\n  \"OtpType\": \"LOGIN\",\n  \"ProgramId\": 19,\n  \"RelationType\": 4\n}"

response = http.request(request)
puts response.read_body

{
  "results": {
    "IsSucessful": true,
    "ErrorCode": "000",
    "ExceptionMessage": "Success",
    "ReturnObject": true,
    "Count": 0
  }
}

Sends an OTP to a member identified by their RelationReference (CID). This is the preferred OTP trigger for member-facing portals where the CID is already established in your session — it avoids an extra lookup compared to the email-based flow. Loyalife routes the OTP to the member’s registered channel based on their program configuration. Follow this call with Verify OTP by Relation Reference to complete verification.

OtpType Values

Value	Use Case
`ACTIVATION`	Account activation after registration
`LOGIN`	Member login via OTP
`FORGOTPWD`	Forgot password — initiate reset
`CHANGEPASSWORD`	Change password (member is logged in)
`RESETPASSWORD`	Reset password (admin-triggered)
`FORGOTUSERNAME`	Forgot username recovery
`TwoFA`	Two-factor authentication
`UNBLOCKMEMBER`	Unblock a locked member account
`NONE`	No specific type
`CASHBACKCONFIRM`	Cashback transaction confirmation
`POINTTRANSFERCONFIRM`	Points transfer confirmation
`FAMILYPOOLINGMERGE`	Family pooling account merge confirmation
`FAMILYPOOLINGUNMERGE`	Family pooling account unmerge confirmation
`AIRREVIEWNCONFIRM`	Air booking review confirmation
`DOMESTICFLIGHTREVIEWNCONFIRM`	Domestic flight booking confirmation
`HOTELREVIEWNCONFIRM`	Hotel booking review confirmation
`CARREVIEWNCONFIRM`	Car booking review confirmation
`GIFTCARDREVIEWNCONFIRM`	Gift card review confirmation
`PACKAGEREVIEWNCONFIRM`	Package booking review confirmation
`SHOPREVIEWNCONFIRM`	Shop purchase review confirmation
`SHOPDIGITALREVIEWNCONFIRM`	Digital shop review confirmation
`MERCHANTREVIEWNCONFIRM`	Merchant review confirmation
`ISPREVIEWNCONFIRM`	ISP review confirmation
`INSURANCEREVIEWNCONFIRM`	Insurance review confirmation

Responses

200 — Success

Path	Type	Description
`results.IsSucessful`	boolean	`true`
`results.ErrorCode`	string	`000`
`results.ExceptionMessage`	string	`Success`
`results.ReturnObject`	boolean	`true` when OTP is sent
`results.Count`	integer	Always `0`

Verify the OTP using Verify OTP by Relation Reference.

OTP expiry duration, delivery channel, and maximum attempt limits are configurable at the program level in Loyalife Admin. Confirm these values with your Xoxoday implementation contact.

Authorizations

Authorization

string

header

required

JWT obtained from Generate Auth Token. Pass as Authorization: bearer {token}.

Body

application/json

UniquerefID

string

required

The member's RelationReference (CID)

Example:

"jane.doe@example.com"

SourceCode

enum<integer>

required

1=Web, 2=Mobile, 3=Email, 4=Service

Available options:

1,

2,

3,

4

Example:

1

SourceAddress

string

required

IP address of the requesting system

Example:

"192.168.1.1"

OtpType

enum<string>

required

Purpose of the OTP. Must match between Generate and Verify calls.

Available options:

ACTIVATION,

LOGIN,

FORGOTPWD,

CHANGEPASSWORD,

RESETPASSWORD,

FORGOTUSERNAME,

TwoFA,

UNBLOCKMEMBER,

NONE,

CASHBACKCONFIRM,

POINTTRANSFERCONFIRM,

FAMILYPOOLINGMERGE,

FAMILYPOOLINGUNMERGE,

AIRREVIEWNCONFIRM,

DOMESTICFLIGHTREVIEWNCONFIRM,

HOTELREVIEWNCONFIRM,

CARREVIEWNCONFIRM,

GIFTCARDREVIEWNCONFIRM,

PACKAGEREVIEWNCONFIRM,

SHOPREVIEWNCONFIRM,

SHOPDIGITALREVIEWNCONFIRM,

MERCHANTREVIEWNCONFIRM,

ISPREVIEWNCONFIRM,

INSURANCEREVIEWNCONFIRM

Example:

"LOGIN"

ProgramId

integer

required

Example:

19

RelationType

integer

required

Use 4 for customers

Example:

4

Response

200 - application/json

OTP sent

⌘I

Overview

Core Concepts

Authentication

Member Management

OTP

Transactions

Points Redemption

Generate OTP by Relation Reference

OtpType Values

Responses

Authorizations

Body

Response

​OtpType Values

​Responses

Authorizations

Body

Response

OtpType Values

Responses