search

JoshuaBuditama / slowvid

0 stars 2 forks source link

Mock message (SMS) service #41

Closed cskeogh closed 4 years ago

cskeogh commented 4 years ago

As as server, I want to send a client a OTP via SMS, so clients can't sign-up multiple times using the same phone number.

Implement a simple mock message (SMS) service that behaves somewhat like a message service at a real telephone company . Per #23 SlowVid back-end can't store phone numbers, therefore back-end needs a way to send an SMS fire-and-forget.

It would be possible to implement the mock SMS service within SlowVid back-end, but doesn't seem right, and would have to store the phone number:

otp-bad

A simple mock message (SMS) service instead:

otp

Let me know if you don't like it

cskeogh commented 4 years ago

Note: The mock message service would not re-implement a security model like the telephone companies. Real SMS security would rely on the transport layer, SIM IDs, IMEIs etc which aren't available in a mock environment. The mock service would allow anyone to send a message to anyone, and clients can retrieve their messages by supplying their phone number only. If the mock message service was later switched to a real message service, SlowVid would utilise the security of the real message service.