{"schemaVersion":"1.0","sourceCommit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca","sourceVisibility":"private","article":{"id":"api-mansoq-core-teleicu-otploginview-36524ef9","title":"OTPLogin View API reference · mansoq-core-teleicu","summary":"Static source contract for OTPLogin View: 2 declared or inherited operation mappings, schema/field evidence and authorization/refusal references. Deployment and behavioral review remain explicit.","module":"IT & integrations","roles":["IT administrator","Developer","Integration engineer"],"facilities":["All configured facility types"],"kind":"reference","minutes":3,"prerequisites":["Use the API contract from the installed deployment and an authorized synthetic test environment.","Confirm facility/organization scope, action permissions and optional app enablement.","This reference is static source evidence; complete payload, authorization, failure and end-to-end review remains recorded as pending."],"steps":[],"sections":[{"title":"Declared route and availability","body":"This resource is declared in **mansoq-core-teleicu** at `/api/v1/otp/`. verified core mount in config/urls.py This is an alternative core contract, not proof that the primary core uses the same behavior. A registered path and an indexed handler do not prove deployment availability, user permission or production readiness."},{"title":"Operation map","body":"| Method | Path | Action | Evidence |\n| --- | --- | --- | --- |\n| POST | `/api/v1/otp/send/` | send | @action declaration |\n| POST | `/api/v1/otp/login/` | login | @action declaration |"},{"title":"send · POST","body":"**POST /api/v1/otp/send/** — action `send`. static contract extracted; runtime/permission/payload behavior review pending.\n\n**decorator request: OTPRequestBaseSpec**. Declared fields below; inherited fields are retained in the schema inventory.\n\n| Field | Type | Required | Constraints |\n| --- | --- | --- | --- |\n| phone_number | str | true | No extra constraint extracted |\n\n**Authorization:** no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.\n\n**Class policy declarations:** permission_classes: ; authentication_classes: ."},{"title":"login · POST","body":"**POST /api/v1/otp/login/** — action `login`. static contract extracted; runtime/permission/payload behavior review pending.\n\n**decorator request: OTPLoginSpec**. Declared fields below; inherited fields are retained in the schema inventory.\n\n| Field | Type | Required | Constraints |\n| --- | --- | --- | --- |\n| phone_number | str | true | No extra constraint extracted |\n| otp | str | true | No extra constraint extracted |\n\n**Authorization:** no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.\n\n**Class policy declarations:** permission_classes: ; authentication_classes: .\n\n**Declared refusal/error evidence:** ValidationError (dynamic detail; inspect source); Throttled (dynamic detail; inspect source).\n\n**Conditional gates:** conditional/computed expression; inspect pinned declaration comparison settings.OTP_MAX_FAILURES; otp_object.failed_attempts comparison settings.OTP_MAX_VERIFY_ATTEMPTS.\n\n**Direct refusal present:** the handler/helper contains a top-level raise. Review whether the operation is intentionally disabled or only performs validation before relying on it."},{"title":"Integration review checklist","body":"Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure."}],"troubleshooting":[{"problem":"A declared route is unavailable or a request is rejected","solution":"Compare the installed revision, actual API schema, optional plugin mount, HTTP-method restrictions and recorded validation/permission evidence. Do not bypass a refusal or send a production transaction to test documentation."}],"sources":[{"path":"repositories/teleicu/mansoq-core-teleicu/config/api_router.py","line":125,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":122,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":130,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/viewsets/base.py","line":319,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":57,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":139,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":71,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}],"related":["it-api-contract","it-api-auth","security-rcm-roles"],"verification":"Static API contract — behavior review pending","version":"f6e9f05f76d4","apiReferenceIds":["backend-resource-3ae691ca36524ef9","backend-resource-3ae691ca36524ef9:POST:send","backend-resource-3ae691ca36524ef9:POST:login"]},"backend":{"resources":[{"id":"backend-resource-3ae691ca36524ef9","localPrefix":"otp","viewset":"OTPLoginView","classId":"repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPLoginView","basename":"otp-login","source":{"path":"repositories/teleicu/mansoq-core-teleicu/config/api_router.py","line":125,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"conditions":[],"repository":"repositories/teleicu/mansoq-core-teleicu","classSource":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":122,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"description":"","path":"/api/v1/otp/","mountStatus":"verified core mount in config/urls.py","operationIds":["backend-resource-3ae691ca36524ef9:POST:send","backend-resource-3ae691ca36524ef9:POST:login"],"unresolvedViewset":false,"reviewStatus":"registered resource enumerated; behavioral review pending"}],"operations":[{"id":"backend-resource-3ae691ca36524ef9:POST:send","resourceId":"backend-resource-3ae691ca36524ef9","repository":"repositories/teleicu/mansoq-core-teleicu","boundary":"alternative-core","method":"POST","path":"/api/v1/otp/send/","declaredPattern":"/api/v1/otp/send/","action":"send","viewset":"OTPLoginView","classId":"repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPLoginView","detail":false,"allowedByDeclaredHttpMethods":true,"mountStatus":"verified core mount in config/urls.py","routeEvidence":{"path":"repositories/teleicu/mansoq-core-teleicu/config/api_router.py","line":125,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":130,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"@action declaration","methodEvidenceIds":["repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py:130:send","repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/viewsets/base.py:319:get_queryset"],"schemaIds":{"decorator request":"repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPRequestBaseSpec"},"classPermissionEvidence":[{"kind":"permission_classes","declaration":[],"source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":124,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"kind":"authentication_classes","declaration":[],"source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":123,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[]},{"id":"backend-resource-3ae691ca36524ef9:POST:login","resourceId":"backend-resource-3ae691ca36524ef9","repository":"repositories/teleicu/mansoq-core-teleicu","boundary":"alternative-core","method":"POST","path":"/api/v1/otp/login/","declaredPattern":"/api/v1/otp/login/","action":"login","viewset":"OTPLoginView","classId":"repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPLoginView","detail":false,"allowedByDeclaredHttpMethods":true,"mountStatus":"verified core mount in config/urls.py","routeEvidence":{"path":"repositories/teleicu/mansoq-core-teleicu/config/api_router.py","line":125,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"handlerSource":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":139,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"registrationConditions":[],"evidenceKind":"@action declaration","methodEvidenceIds":["repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py:139:login","repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/viewsets/base.py:319:get_queryset"],"schemaIds":{"decorator request":"repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPLoginSpec"},"classPermissionEvidence":[{"kind":"permission_classes","declaration":[],"source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":124,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"kind":"authentication_classes","declaration":[],"source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":123,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"filterEvidence":[],"reviewStatus":"static contract extracted; runtime/permission/payload behavior review pending","pathParameters":[]}],"methodEvidence":[{"id":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py:130:send","name":"send","owner":"repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPLoginView","summary":"","source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":130,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":["repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPRequestBaseSpec"],"schemaUsages":[{"purpose":"decorator request","schemaId":"repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPRequestBaseSpec","source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":126,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/viewsets/base.py:319:get_queryset","name":"get_queryset","owner":"repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.viewsets.base.EMRBaseViewSet","summary":"","source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/viewsets/base.py","line":319,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[],"explicitResponseStatuses":[],"conditions":[],"schemaIds":[],"schemaUsages":[],"unconditionalRaise":false,"reviewStatus":"static declaration extracted; behavioral/security review pending"},{"id":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py:139:login","name":"login","owner":"repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPLoginView","summary":"","source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":139,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"signatureParameters":[],"parametersRead":[],"permissionChecks":[],"declaredErrors":[{"exception":"ValidationError","message":null,"dynamicMessage":true,"source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":179,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"exception":"ValidationError","message":null,"dynamicMessage":true,"source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":176,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"exception":"Throttled","message":null,"dynamicMessage":false,"source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":145,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"explicitResponseStatuses":[],"conditions":[{"condition":"conditional/computed expression; inspect pinned declaration comparison settings.OTP_MAX_FAILURES","source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":144,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}},{"condition":"otp_object.failed_attempts comparison settings.OTP_MAX_VERIFY_ATTEMPTS","source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":168,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"schemaIds":["repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPLoginSpec"],"schemaUsages":[{"purpose":"decorator request","schemaId":"repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPLoginSpec","source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":135,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"unconditionalRaise":true,"reviewStatus":"static declaration extracted; behavioral/security review pending"}],"schemas":[{"id":"repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPRequestBaseSpec","name":"OTPRequestBaseSpec","source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":57,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"kind":"Python declared schema/model evidence","fields":[{"name":"phone_number","type":"str","required":true,"hasDefault":false,"source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":58,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"constraints":{}}],"validation":[{"methodId":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py:62:validate_phone_number","source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":62,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"baseTypes":["BaseModel"],"reviewStatus":"declared fields extracted; runtime validation review pending","referencedSchemaIds":[]},{"id":"repositories/teleicu/mansoq-core-teleicu:mansoq.emr.api.otp_viewsets.login.OTPLoginSpec","name":"OTPLoginSpec","source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":71,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"kind":"Python declared schema/model evidence","fields":[{"name":"phone_number","type":"str","required":true,"hasDefault":false,"source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":58,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"constraints":{}},{"name":"otp","type":"str","required":true,"hasDefault":true,"source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":72,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"constraints":{}}],"validation":[{"methodId":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py:62:validate_phone_number","source":{"path":"repositories/teleicu/mansoq-core-teleicu/mansoq/emr/api/otp_viewsets/login.py","line":62,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"}}],"baseTypes":["OTPRequestBaseSpec"],"reviewStatus":"declared fields extracted; runtime validation review pending","referencedSchemaIds":[]}],"frameworkSettings":[{"name":"DEFAULT_AUTHENTICATION_CLASSES","value":["config.authentication.CustomJWTAuthentication","config.authentication.CustomBasicAuthentication","rest_framework.authentication.SessionAuthentication","rest_framework.authentication.TokenAuthentication"],"source":{"path":"repositories/teleicu/mansoq-core-teleicu/config/settings/base.py","line":366,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"scope":"source default; deployment overrides and action-level policies may differ"},{"name":"DEFAULT_PERMISSION_CLASSES","value":["rest_framework.permissions.IsAuthenticated","mansoq.security.utils.permission_class.MansoqAuthentication"],"source":{"path":"repositories/teleicu/mansoq-core-teleicu/config/settings/base.py","line":366,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"scope":"source default; deployment overrides and action-level policies may differ"},{"name":"DEFAULT_PAGINATION_CLASS","value":"mansoq.utils.pagination.mansoq_pagination.MansoqLimitOffsetPagination","source":{"path":"repositories/teleicu/mansoq-core-teleicu/config/settings/base.py","line":366,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"scope":"source default; deployment overrides and action-level policies may differ"},{"name":"PAGE_SIZE","value":14,"source":{"path":"repositories/teleicu/mansoq-core-teleicu/config/settings/base.py","line":366,"commit":"f6e9f05f76d443b26ebd2369f67d3c3bd52257ca"},"scope":"source default; deployment overrides and action-level policies may differ"}]},"frontend":{"operations":[],"schemas":[]},"services":{"operations":[]},"boundaries":[]}