Issues with OAuth Callback and Missing Fields in getProfile Endpoint
-
Dear Angel Broking Support Team,
I am currently integrating the Angel Smart API and have encountered two critical issues that are blocking our implementation:
Missing state Parameter in Callback When initiating the OAuth flow using the following URL: https://smartapi.angelbroking.com/publisher-login/?api_key=<apiKey>&state=3888e149-bc94-4a28-b36c-619bac88865a The callback I receive is: https://yourdomain.com/api/webhook/angel/callback?auth_token=<auth_token>&feed_token=<feed_token>&refresh_token=<refresh_token> However, the state parameter is not returned in the callback, which is essential for maintaining session integrity and preventing CSRF attacks.
Missing email and mobile in getProfile Response I am using the following endpoint to retrieve user profile information: https://apiconnect.angelone.in/rest/secure/angelbroking/user/v1/getProfile Unfortunately, the response does not include the email or mobile fields, which are necessary for identifying the user in our system.
Could you please confirm:
Whether the state parameter is expected to be returned in the callback?
How we can retrieve the user's email and mobile information—either via this endpoint or an alternative?
These details are crucial for completing our integration. I appreciate your assistance and look forward to your guidance.
Best regards, Nirav