fix(customers): update the customer with its own phone number

postman/collections/Fleetbase API/.resources/definition.yaml

@@ -38,6 +38,7 @@ variables:
   customer_name: ""
   customer_password: ""
   customer_phone: ""
+  created_customer_phone: ""
   verification_code: ""
   push_token: ""
   # Deliberately NOT declaring driver_identity / driver_password / driver_phone:

postman/collections/Fleetbase API/Customers/Create a Customer.request.yaml

@@ -31,6 +31,9 @@ scripts:
       if (json_response && json_response.id) {
         cv.set("customer_id", json_response.id);
         cv.set("customer_name", json_response.name);
+        // The number this account was created with. Update Authenticated Customer sends it back,
+        // because changing to another number needs a code sent to that number.
+        cv.set("created_customer_phone", json_response.phone);
         if (json_response.token) {
           cv.set("customer_token", json_response.token);
         }

postman/collections/Fleetbase API/Customers/Update Authenticated Customer.params.yaml

@@ -16,6 +16,10 @@ fields:
     type: string
     required: false
     description: New phone (E.164 recommended). Mirrored to the linked user.
+  - name: phone_code
+    type: string
+    required: false
+    description: Required when `phone` differs from the current number. The code sent by SMS to the new number. The change is refused when another account holds that number.
   - name: photo
     type: string
     required: false

postman/collections/Fleetbase API/Customers/Update Authenticated Customer.request.yaml

@@ -1,6 +1,6 @@
 $kind: http-request
 name: "Update Authenticated Customer"
-description: "Updates the authenticated customer's profile. Changes to `name`, `email`, and `phone` are mirrored onto the linked user so subsequent logins work."
+description: "Updates the authenticated customer's profile. Changes to `name`, `email`, and `phone` are mirrored onto the linked user so subsequent logins work. Changing to a different phone number needs `phone_code`, the code sent to that number, and is refused when another account holds it."
 url: "{{base_url}}/{{namespace}}/customers/me"
 method: PUT
 headers:
@@ -11,7 +11,7 @@ body:
   content: |-
     {
       "name": "{{customer_name}}",
-      "phone": "{{customer_phone}}",
+      "phone": "{{created_customer_phone}}",
       "email": "{{customer_email}}"
     }