Step 4: Verify Aadhaar OTP and Enrol/Create ABHA
Sensitive values are not written to a database by this test file. The Client Secret and Aadhaar are never stored in the PHP session. The OTP transaction, short-lived access token and ABDM public key are cleared after successful enrolment. Only the successful enrollment transaction ID is kept temporarily for Step 7.