search

aaronpk / oauth-first-party-apps

https://datatracker.ietf.org/doc/html/draft-parecki-oauth-first-party-apps
Other
9 stars 7 forks source link

SMS is an abbreviation for a specific service #89

Closed sjjhsjjh closed 1 week ago

sjjhsjjh commented 3 months ago

The term SMS is used in the document but isn't introduced. It's an abbreviation for Short Message Service or Short Messaging Service, see for example https://en.wikipedia.org/wiki/SMS Also maybe the document should be circumspect about whether the use case applies only to SMS or could be applied to similar services such as USSD.

For example, this part could be rewritten.

SMS Confirmation Code

A user may be required to provide an SMS confirmation code as part of an authentication ceremony to prove they control a mobile phone number. The user provides a phone number and is then required to enter an SMS confirmation code sent to the phone. If the correct confirmation code is returned to the Authorization Server, it issues Access and Refresh Tokens.

Edited version could be like this.

Mobile Confirmation Code

A user may be required to provide a confirmation code as part of an authentication ceremony to prove they control a mobile phone number. The user provides a phone number and is then required to enter a confirmation code sent to the phone by SMS (Short Messaging Service) or a similar mobile service. If the correct confirmation code is returned to the Authorization Server, it issues Access and Refresh Tokens.