Test a NetBanking login and the balances behind it

The checks that matter

The flow is a two-step authentication followed by a summary where the total has to reconcile with the accounts above it.

The total relationship value is the sum of the two accounts, which makes it checkable rather than merely present. A summary total that does not equal its parts is the kind of defect a customer notices immediately and trusts slowly afterwards.

The flow as a test file

The second step is asserted by its title as well as its field, which confirms the flow genuinely advanced rather than re-rendering the first step with an extra input.

---
mode: testing
url: https://my-testing-repo-main.vercel.app/hdfc-clone-app/login?reset=true
max_steps: 45
tags: [hdfc-bank, banking, auth]
---

# Hindfirst Bank 24.1: NetBanking login

Catalog objective: log in with a customer id and an OTP in the test environment.
Key assertion: the account summary renders the balances.

## Enter the credentials
Type "HF4471902" into "Customer id", type "Netbank@2026" into "Password", click "Continue", and verify the page moves to the step titled "Step 2 - one time password".

## Verify the second factor is required
Verify the OTP step shows "Sent to" of "•••••• 4418" and an "OTP" field.

## Enter the OTP
Type "481902" into "OTP" and click "Verify and sign in", then verify the page moves to the account summary for "Priya Nair".

## Verify the balances rendered
Verify the "Deposit accounts" card shows "Savings Account" of "₹284,530.75", "Current Account" of "₹91,240.00" and "Total relationship value" of "₹375,770.75".

The masked destination number is asserted explicitly, because it appears before authentication is complete and should never show the full value.

Step by step coverage

Credentials, a challenge, a code and a summary.

Asserting the customer name on the summary confirms the session belongs to the right person, which is a cheap check against a cached page from a previous session.

Adding it to a suite

kane-cli testmd run tests/hdfc-bank/netbanking-login_test.md

Add a variant with an expired OTP, since a code that works after it should have stopped is the most serious defect this flow can carry.

Legacy surfaces change rarely and break without warning. Running Kane CLI in CI covers scheduled checks on flows nobody is watching, and the test.md format covers keeping credentials out of the file.