validifii / core

0 stars 0 forks source link

Authorize App #4

Open DrAaronSD opened 8 years ago

DrAaronSD commented 8 years ago

User gives each app or identification device permission to access their Vcard. Permission is granted via text confirmation to the primary mobile phone number (2-factor authentication).

Flow is:

  1. Non-authenticated user within a connected app asked to login by entering phone number
  2. SMS sent with code for user to input into app
  3. User enters code and if phone number linked to Vcard account then user asked to give permission
    • User selects one-time permission or 90-day permission for app to access their Vcard
  4. If phone number does not match an account - they are asked to create a Vcard account.

Same flow for user to allow identification devices (NFC tag, BLE tag, etc) to be linked to their account via the same permission process - text confirmation to primary mobile phone number (2-factor authentication).