Login by SMS

[chpapa]

Description

Login by SMS, kind of like Telegram / Village. Where users have no username / email (both are optional), users can sign up or login simply by a verification on SMS.

Design/Specification

WIP

• Support Twilio as the only SMS provider is acceptable.

Portal Features

• An interface for setup Twilio credential
• An interface for setup redirect URL on magic link

API Design

skygear.auth.passwordlessSend({
  connection: 'email', // or 'sms'
  send: 'code', // or link
  email: 'rick.mak@gmail.com'  // phoneNumber
})

skygear.getLoginRedirectResult().then(function(skygearUser) {

  }).catch(function(error) {

  });

Related Issues

• Server Issues
• Client Issues
• Guides Issues

Progress Tracker

• [ ] Specification Design Approval
• [ ] Write (code + tests + API docs) then get them merged. Put All PR there
  • [ ] Code
  • [ ] Minimal tests
  • [ ] Minimal API Docs
• [ ] Guides. Put All PR there
• [ ] Release
  • [ ] Update release notes
  • [ ] Release

Advice

• Specification Design Approval
  • Once you get LGTM from another Skygear Core Team Member, you can check this checkbox. And apply the "workflow/design-complete" label.
• Coding
  • Use as many PRs as you need. Write tests in the same or different PRs, as is convenient for you.
  • API doc should goes in the same PR with the code.
  • As each PR is merged, add a comment to this issue referencing the PRs.
  • When you are done with the code, apply the "workflow/code-complete" label.
• Guides
  • Write or modify guides and get them merged in https://github.com/skygeario/guides
  • When the PR of guides is merged, check this checkbox and apply the "workflow/guides-complete" label.

[tensiuyan]

@chpapa is this like one time login?

[chpapa]

@tensiuyan what do you meant by one time login?

[seventhmoon]

I think @tensiuyan means,

1. is the SMS going to send a one time password for log-in (like https://1cm.hk.chinamobile.com/site/login.html?lang=en), or
2. is the SMS is to verify the user owns the number for registration use (and have to provide a password for registration).

[chpapa]

Oh it is like one time login. For SMS verification there is another issue #20

[rickmak]

@limouren and @josephchow102 are working on an implementation.

[rickmak]

I updated a bit on the API design and found it will more appropriate to design the feature to be passwordless. We may take reference to Auth0: https://auth0.com/docs/connections/passwordless