Overview
Additional Information
Overview
Additional Information
Overview
Additional Information
Overview
Additional Information
SIM Swap
SIM Swap enables you to verify if a SIM card has been recently swapped in a device.
This API follows the CAMARA standard specification.
It can be used for
Verifying if a SIM card has recently been swapped.
Fraud prevention and detection.
Securing login and registration processes.
Improved user verification.
API Information
Version | v1.0.0 |
Protocol | HTTPS |
Sandbox URL | https://api-sandbox.vf-dmp.engineering.vodafone.com |
Live URL | https://api.vf-dmp.engineering.vodafone.com |
Version history | Release date | Status | Description |
|---|---|---|---|
0.4.0 | February 2024 | Live | SIM Swap API - CAMARA specification |
Endpoints
Method | Name | Endpoint |
|---|---|---|
POST | Get Access Token Using JWT Bearer | /oauth2/sim-swap-camara/v2/token |
POST | Authentication Request | /openIDConnectCIBA/sim-swap-camara/v1/bc-authorize |
POST | Token Request | /openIDConnectCIBA/sim-swap-camara/v1/token |
POST | Retrieve SIM Swap Date | /sim-swap/v1/retrieve-date |
POST | Check SIM Swap | /sim-swap/v1/check |
GET | Ping | /sim-swap/v1/ping |
How it works
A new customer registers to use an online app.
The app sends a request to Vodafone's SIM Swap API.
Vodafone responds with a timestamp of the last time the SIM was changed:
"latestSimChange": "2024-01-05T23:56:02.471Z".The app can allow or deny the user's actions based on the timestamp information provided by the API.
Run in Postman
To begin using the Vodafone workspace in Postman, please follow the steps below to create a set of credentials that can be used with our sandbox collections:
Register an account on https://developer.vodafone.com and create a sandbox app for the APIs that you are interested in.
Use the Client Key and Secret from your sandbox app to populate the relating variables in the "Sandbox Credentials" environment group in Postman.
These API use a three-legged OAuth flow. A three-legged OAuth process involves three parties: the end-user (or resource owner), the client (the third-party application), and the server (or authorization server).
First call the authorize endpoint to get an authorization code. Your client credentials will be taken from the environment variables.
You need to call the authorize end-point for each Identity API in the CAMARA portfolio as the product scope is set in the request body of the authorize call.
Call the token endpoint to exchange the authorization code for a bearer token that is used in the API resource endpoint.
The last bearer token and trace ID will be stored in collection variables associated with the API solution that you have chosen.
You can use these collections as read-only or create a fork into your own personal workspace to edit the details.
You can access all of Vodafone's sandbox APIs in our Postman workspace by clicking the link below:
What is Postman?
Postman is a popular development and testing tool that is widely used across the API developer community. It offers an easy to use interface for making HTTP requests, testing API responses and collaborating with team members. For more details, see postman.com.