Okta accepts invalid phone number

[evapeng]

:information_source: If you have a question, please post it on the Okta Developer Forum instead. Issues in this repository are reserved for bug reports and feature requests.

I'm submitting a

• [x] bug report
• [ ] feature request

Background info

SMS MFA Validation works even if there is an extra digit at the end, or random symbols throughout.

Expected behavior

Phone number should be considered invalid.

What went wrong?

Inputting the correct phone number with an extra digit at the end, or random symbols throughout will still be considered valid.

Steps to reproduce

1. First enter a phone number with invalid symbol or letter (ex. '225849183@' )
2. Click "Send code" (this should trigger an error)
3. Type in your valid phone number with an extra number at the end
4. Click "Send code"

Your environment

• Okta Sign-In Widget Version: 3.8.1
• Browser: Chrome
• OS: MacOS Mojave
• Language: English

[aarongranick-okta]

internal ref: OKTA-298389