camaraproject / NumberVerification

Repository to describe, develop, document and test the Number Verification API family
Apache License 2.0
16 stars 21 forks source link

[Phone number verify] Is it mandatory to implement both hashedPhoneNumber and plain text phoneNumber? #155

Open trehman-gsma opened 3 weeks ago

trehman-gsma commented 3 weeks ago

Problem description The NumberVerificationRequestBody can accept one of phoneNumber or hashedPhoneNumber. Is it mandatory for API implementations to support both?

For example, could an implementation only support hashedPhoneNumber?

Expected action Clarify the documentation with more definitive language. We have encountered at least one operator who interpreted the specification as only requiring support for one of the options.

bigludo7 commented 3 weeks ago

My understanding is that we have to provide both but happy to hear from other.

I'm generally not confortable to provide partial implementation to avoid developer deception... except when local regulation prevent us to provide complete implementation.

fernandopradocabrillo commented 3 weeks ago

I'm with @bigludo7 here. In TEF we support both and from the WG we should promote full implementation of the APIs