@aeneasr will add a small guide about how to configure Kratos with Twilio and use phone numbers as identifiers, plus recovery and verification process

@splaunov just for your information - this PR implements recovery and verification by using OTP codes. Maybe you will find it useful

@alexey-reshetnik could you give a brief flow chart of how you except the flow to work? You can use mermaid to create such a chart :) I think we have a couple of states we need to take care of:

• New flow
• OTP sent
• OTP entered but wrong, expired, ...
• OTP valid

and probably a few other error flows :)

Also, it would be awesome if the OTP strategy could work with links as well, so for example:

/verification?code=123456&flow=...

which would pre-fill the form with the OTP code. This could be useful if we want to use this strategy to send magic links and would basically render the link strategy completely obsolete.

Also, we need to talk about entropy. Either, we make the OTP entropy high enough (e.g. [a-zA-Z0-9]{8}) or we introduce something which marks the flow as failed after the OTP has been entered incorrectly for e.g. 3 times.

WDYT?

Hi!
I've tried to review the otp strategy draft and did some modifications to make all existing tests pass:
monta-app@613a599

But after the review it seems to me that there is a good reason to merge it with the 'code' registration/login strategy.
All the code processing logic should be the same in #2033 and in #2184

What do you think?

fyi I am currently working on passwordless auth using webauthn. I suggest that once it is merged we copy that pattern for SMS auth: #2260

Codecov Report

Merging #2184 (8df90be) into master (1515b83) will decrease coverage by 2.15%.
The diff coverage is 19.81%.

❗ Current head 8df90be differs from pull request most recent head 5f6d1cb. Consider uploading reports for the commit 5f6d1cb to get more accurate results

@@            Coverage Diff             @@
##           master    #2184      +/-   ##
==========================================
- Coverage   75.26%   73.10%   -2.16%     
==========================================
  Files         294      299       +5     
  Lines       17159    16935     -224     
==========================================
- Hits        12914    12380     -534     
- Misses       3266     3613     +347     
+ Partials      979      942      -37     

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.