# AuthSetu — Enterprise User Authentication & Digital Document Verification Gateway

> AuthSetu is an enterprise SaaS application operated by InfoSkills Technology Pvt. Ltd. (https://digilocker.authsetu.com). It provides REST APIs and web interfaces for multi-channel user OTP authentication (Email, WhatsApp, SMS) and consent-driven DigiLocker digital document verification (PAN Cards, Driving Licenses, Vehicle RC, Aadhaar metadata).

## Core Capabilities & Services

- **Multi-Channel User Authentication**: Real-time 6-digit OTP delivery across Email (AWS SES), WhatsApp Business API (Twilio), and SMS with intelligent 4-carrier failover routing (Airtel, Jio, Vi, BSNL).
- **DigiLocker eKYC Document Verification**: Consent-driven document retrieval using OAuth 2.0 PKCE. Verified records are encrypted with AES-256 GCM in private AWS S3 storage (ap-south-1 Mumbai).
- **AuthPartner Onboarding Console**: Instant Client ID/Secret generation for B2B partners with 12 granular privacy scopes (`issued_docs`, `digilocker_drive`, `openid`, `profile`, `email`, `address`, etc.).
- **Machine-to-Machine (M2M) API Security**: SHA-256 HMAC authorization header signatures (`X-API-Key`) and webhooks for real-time verification event dispatch.

## REST API Endpoints

- `GET /health` — Service uptime & configuration health check
- `GET /api/v1/digilocker/authorize-url` — Generates DigiLocker OAuth 2.0 PKCE consent redirect URL
- `GET /api/v1/digilocker/documents/saved` — Lists stored user identity documents
- `GET /api/v1/digilocker/documents/file` — Downloads encrypted document stream or presigned URL
- `POST /api/v1/auth/keys/generate` — Generates M2M API Keys for developer integrations
- `POST /api/v1/auth/clients` — Registers AuthPartner client applications

## Official Company & Contact Details

- **Application Name**: AuthSetu
- **Corporate Entity**: InfoSkills Technology Pvt. Ltd.
- **Website URL**: https://digilocker.authsetu.com/
- **API Base URL**: https://api-digilocker.authsetu.com/
- **Primary Support Engineer**: Sonu Kumar
- **WhatsApp Support**: +91 9810659036 (https://wa.me/919810659036)
- **Direct Phone Support**: +91 9910525949 (tel:9910525949)
- **Sales & Billing Email**: info@authsetu.com
- **Legal & Privacy Email**: info@infoskillstechnology.com

## Compliance & Security

- **DPDP Act 2023 & GDPR Compliant**: Strict consent-based data access with 7-day money-back billing guarantees.
- **Non-Government Entity Notice**: AuthSetu is an independent private technology software vendor, not affiliated with or representing any government department.

## Detailed Context & API Specs

- [Complete Documentation & Specs](https://digilocker.authsetu.com/llms-full.txt)
- [Privacy Policy](https://digilocker.authsetu.com/privacy-policy)
- [Terms of Service](https://digilocker.authsetu.com/terms-of-service)