forked from shihaam/thijooree
add support to detect dhiraagu and ooredoo packages
This commit is contained in:
@@ -0,0 +1,172 @@
|
||||
# Number Lookup
|
||||
|
||||
Validate a Dhiraagu mobile number and determine whether it is prepaid (reload) or postpaid (bill pay).
|
||||
|
||||
This is a two-step process: first fetch the Easy Pay page to extract the nonce, then POST the number to the IO API.
|
||||
|
||||
---
|
||||
|
||||
## Step 1 — Fetch Nonce
|
||||
|
||||
### Endpoint
|
||||
|
||||
```
|
||||
GET https://www.dhiraagu.com.mv/services/easy-pay
|
||||
```
|
||||
|
||||
### Request Headers
|
||||
|
||||
```
|
||||
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0
|
||||
```
|
||||
|
||||
### curl Example
|
||||
|
||||
```bash
|
||||
curl --request GET \
|
||||
--url 'https://www.dhiraagu.com.mv/services/easy-pay' \
|
||||
--header 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0'
|
||||
```
|
||||
|
||||
### Response
|
||||
|
||||
The server returns an HTML page. The nonce is embedded in a `<script>` block:
|
||||
|
||||
```html
|
||||
<script>
|
||||
var nonce = "feb6acb9-a532-428e-a4d6-c4e5515b4bc3";
|
||||
...
|
||||
</script>
|
||||
```
|
||||
|
||||
**Extraction regex:**
|
||||
|
||||
```
|
||||
var nonce = "([^"]+)"
|
||||
```
|
||||
|
||||
The nonce is a UUID (36-char string). It is tied to this page load and must be used immediately in Step 2.
|
||||
|
||||
---
|
||||
|
||||
## Step 2 — Number Lookup
|
||||
|
||||
### Endpoint
|
||||
|
||||
```
|
||||
POST https://www.dhiraagu.com.mv/api/sdk-dhr-webapi.ashx?website_id=CA2BB809-3A22-485B-A518-DA6B6DE653A5&sub=dhiraaguIO&act=infoUnlisted
|
||||
```
|
||||
|
||||
### Request Headers
|
||||
|
||||
| Header | Value |
|
||||
|---|---|
|
||||
| `Content-Type` | `application/json` |
|
||||
| `User-Agent` | `Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0` |
|
||||
| `nonce` | UUID extracted from Step 1 |
|
||||
| `Origin` | `https://dhiraagu.com.mv` |
|
||||
|
||||
### Request Body
|
||||
|
||||
```json
|
||||
{
|
||||
"number": "7654321"
|
||||
}
|
||||
```
|
||||
|
||||
| Field | Type | Notes |
|
||||
|---|---|---|
|
||||
| `number` | `string` | 7-digit Dhiraagu mobile number (local format, no country code) |
|
||||
|
||||
### curl Example
|
||||
|
||||
```bash
|
||||
curl --request POST \
|
||||
--url 'https://www.dhiraagu.com.mv/api/sdk-dhr-webapi.ashx?website_id=CA2BB809-3A22-485B-A518-DA6B6DE653A5&sub=dhiraaguIO&act=infoUnlisted' \
|
||||
--header 'Content-Type: application/json' \
|
||||
--header 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0' \
|
||||
--header 'nonce: feb6acb9-a532-428e-a4d6-c4e5515b4bc3' \
|
||||
--header 'Origin: https://dhiraagu.com.mv' \
|
||||
--data '{"number":"7654321"}'
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Responses
|
||||
|
||||
### Success — Prepaid (Reload)
|
||||
|
||||
```json
|
||||
{
|
||||
"respStatus": "OK",
|
||||
"serviceDetails": [
|
||||
{
|
||||
"prepaidIndicator": "Y",
|
||||
"serviceType": "GSM"
|
||||
}
|
||||
],
|
||||
"accountOwnerInfo": {
|
||||
"name": "Ahmed Mohamed",
|
||||
"accountNo": "7654321"
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
| Field | Type | Description |
|
||||
|---|---|---|
|
||||
| `respStatus` | `string` | `"OK"` on success |
|
||||
| `serviceDetails[0].prepaidIndicator` | `string` | `"Y"` = prepaid (reload), `"N"` = postpaid (bill pay) |
|
||||
| `accountOwnerInfo.name` | `string` | Account holder's full name |
|
||||
|
||||
### Success — Postpaid (Bill Pay)
|
||||
|
||||
Same structure as above, with `prepaidIndicator: "N"`.
|
||||
|
||||
```json
|
||||
{
|
||||
"respStatus": "OK",
|
||||
"serviceDetails": [
|
||||
{
|
||||
"prepaidIndicator": "N",
|
||||
"serviceType": "GSM"
|
||||
}
|
||||
],
|
||||
"accountOwnerInfo": {
|
||||
"name": "Fatima Ali",
|
||||
"accountNo": "7123456"
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
### Failure — Number Not Found
|
||||
|
||||
```json
|
||||
{
|
||||
"respStatus": "FAILED",
|
||||
"respMessage": "Number not found"
|
||||
}
|
||||
```
|
||||
|
||||
`respStatus` is not `"OK"`. Treat any non-OK status as unsupported.
|
||||
|
||||
### Failure — Invalid / Expired Nonce
|
||||
|
||||
If the nonce is missing, invalid, or has already been used, the server returns an error response (non-OK status or HTTP 4xx). Re-fetch the Easy Pay page to get a fresh nonce.
|
||||
|
||||
---
|
||||
|
||||
## Result Mapping
|
||||
|
||||
| `prepaidIndicator` | Service |
|
||||
|---|---|
|
||||
| `"Y"` | Dhiraagu Reload |
|
||||
| `"N"` | Dhiraagu Bill Pay |
|
||||
| absent / other | Unsupported — fall back to Ooredoo lookup |
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
[← README](README.md)
|
||||
@@ -0,0 +1,100 @@
|
||||
# Dhiraagu API Documentation
|
||||
|
||||
Reverse-engineered from traffic captures of the Dhiraagu Easy Pay web service (`dhiraagu.com.mv`).
|
||||
|
||||
---
|
||||
|
||||
## Overview
|
||||
|
||||
Dhiraagu exposes a number-lookup API used by their Easy Pay web page to validate mobile numbers before payment. The API uses a two-step flow:
|
||||
|
||||
1. **Nonce extraction** — fetch the Easy Pay HTML page and extract a one-time nonce token embedded in the page JavaScript.
|
||||
2. **Number lookup** — POST the mobile number with the nonce to the IO API endpoint, which returns the account type and owner name.
|
||||
|
||||
The nonce is single-use and page-session-specific; it must be re-fetched for each lookup.
|
||||
|
||||
---
|
||||
|
||||
## Base URL
|
||||
|
||||
```
|
||||
https://www.dhiraagu.com.mv
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Authentication Model
|
||||
|
||||
| Value | How obtained | How used |
|
||||
|---|---|---|
|
||||
| `nonce` | Extracted from Easy Pay page HTML | Sent as `nonce` request header on the lookup POST |
|
||||
|
||||
No persistent session or login is required. The nonce is valid for a single lookup request.
|
||||
|
||||
---
|
||||
|
||||
## Common Request Headers
|
||||
|
||||
```
|
||||
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0
|
||||
Origin: https://dhiraagu.com.mv
|
||||
```
|
||||
|
||||
The `User-Agent` header is required; requests without it are rejected by the server.
|
||||
|
||||
---
|
||||
|
||||
## Number Lookup Flow
|
||||
|
||||
```
|
||||
Client Server
|
||||
| |
|
||||
| GET /services/easy-pay | ← fetch page to get nonce
|
||||
|----------------------------------------->|
|
||||
| 200 OK (HTML page) |
|
||||
| var nonce = "feb6acb9-a532-428e-..." |
|
||||
|<-----------------------------------------|
|
||||
| |
|
||||
| POST /api/sdk-dhr-webapi.ashx |
|
||||
| ?website_id=CA2BB809... |
|
||||
| &sub=dhiraaguIO&act=infoUnlisted |
|
||||
| nonce: feb6acb9-a532-428e-... |
|
||||
| { "number": "7654321" } |
|
||||
|----------------------------------------->|
|
||||
| { respStatus: "OK", |
|
||||
| serviceDetails: [{prepaidIndicator}], |
|
||||
| accountOwnerInfo: { name } } |
|
||||
|<-----------------------------------------|
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Result Interpretation
|
||||
|
||||
| `prepaidIndicator` | Meaning |
|
||||
|---|---|
|
||||
| `"Y"` | Prepaid — use **Dhiraagu Reload** |
|
||||
| `"N"` | Postpaid — use **Dhiraagu Bill Pay** |
|
||||
| absent / other | Number not found or unsupported |
|
||||
|
||||
---
|
||||
|
||||
## Applicable Numbers
|
||||
|
||||
Only Dhiraagu mobile numbers are returned by this API. Dhiraagu numbers in the Maldives start with **7** (7-digit local format, e.g. `7654321`).
|
||||
|
||||
---
|
||||
|
||||
## Documents
|
||||
|
||||
| # | File | Description |
|
||||
|---|---|---|
|
||||
| 1 | [Number Lookup](01-number-lookup.md) | Validate a Dhiraagu number and determine account type |
|
||||
|
||||
---
|
||||
|
||||
|
||||
|
||||
---
|
||||
|
||||
> **Next →** [Number Lookup](01-number-lookup.md)
|
||||
Reference in New Issue
Block a user