Step 4: Verify Aadhaar OTP and Enrol/Create ABHA
Sensitive values are not written to a database by this test file. The Client Secret and Aadhaar are never stored in the PHP session. Only the temporary transaction ID, short-lived access token and ABDM public key are kept in the PHP session between OTP generation and verification, then cleared after successful enrolment.