added validate OTT endpoint

src/openapi/onetimetokens/onetimetokens.yaml

@@ -12,24 +12,72 @@ tags:
       Service Engine APIs for HTM Customers. These are NOT the CRUD APIs to access raw data in the database.
       To be used by touchpoints to get information about HTM customers.
 paths:
-  /onetimetokens:
+  /one-time-tokens:
     post:
       tags:
         - OneTimeTokens
       summary: Create a one time token, to be included in the redirect
       description: |
         Create a one time token, to be included in the redirect
-      body:
+      parameters:
+        - name: Authorization
+          in: header
+          required: true
+          style: simple
+          explode: false
+          schema:
+            type: string
+            example: Bearer {WSO2 Token}
+          description: Fill in a valid WSO2 Token for the touchpoint
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/unavailable'
+            example:
               {
-        "nonce": "randomNonce123"
+                "nonce": "randomNonce123",
               }
       responses:
-        "200":
+        "201":
           description: OK
           content:
             application/json:
               schema:
                 $ref: "#/components/schemas/oneTimeTokenResponse"
+  /one-time-tokens/validate:
+    post:
+      tags:
+        - OneTimeTokens
+      summary: Validate a received one time token 
+      description: Validate a received one time token through the redirect, validates the source and validity of the token
+      parameters:
+        - name: Authorization
+          in: header
+          required: true
+          style: simple
+          explode: false
+          schema:
+            type: string
+            example: Bearer {WSO2 Token}
+          description: Fill in a valid WSO2 Token for the touchpoint
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/unavailable'
+            example:
+              {
+                "token": "handoff-xyz987"
+              }
+      responses:
+        "200":
+          description: OK
+        "400":
+          description: Bad request
+        "401":
+          description: Not authorized
+
 components:
   schemas:
     unavailable: