Menu
I want to implement authentication in my express.js api with phone number, like whatsapp or telegram. I have experience with passport.js but i have not found any strategy for phone numbers.
My aproach is that if i get a phone number by a post request i generate an ID which i send to the specific phone number by sms. If i get back the ID and phone number pair in post request i authenticate the session. Is my aproach good? Is there any npm package which could be useful for me?
410
What is phone number authentication? Phone number authentication is an authentication method in which a sender sends an SMS message to a receiver's phone. Then, the receiver logs into its phone with a one-time code provided in the SMS message.
Passport. js out of the box is safe as your implementation of it to protect routes from unauthorized access. For example if you forget to apply the middleware to certain routes they would not be protected, if you make a mistake in configuring the authentication strategy you may open up your application to an attack.
In first place, you need a service provider able to send SMS.
I have an Ionic app that validate users in the same way that you want and I ussing https://developers.messagebird.com/docs/messaging, because they have a REST API to send SMS and also Voice Calls. My users choose how to receive the validation code, sms or call. Calls are 50% cheaper than SMS.
Other aproach is to use Firebase PhoneNumber authentication. It is free but limited:
How to implement it with Ionic:
The problem with Firebase is that you need to add reCaptcha to your login view.
And if you need to be integrated with passport you can create your own strategy with this module:
Hope it helps !
53
That sounds about right from a high-level approach. You probably want to call an API from your server to send the SMS, I know of two...
Both seem to have Node.js libraries, see https://www.twilio.com/docs/libraries/node and https://www.clockworksms.com/doc/easy-stuff/code-wrappers/node-js-wrapper/.
It's worth noting though that there are several other providers that offer a similar service – you might want to search around and compare your options.
Good luck 👍
38
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
