Step 5: Returning Patient Verification using ABHA Number + OTP
No Client Secret or OTP is written to a database. Temporary access/user tokens are kept only in the PHP session for the current M1 testing flow.