The SmsVerificationRequired annotation verifies the JWT, but does not cover if the protected API receives the same mobile with the mobile in the JWT.
Imagine this case, the order submit form requires a mobile phone number.
The customer needs to finish the sms verification process to make sure he/she is the owner of the mobile phone number that is submitted.
The
SmsVerificationRequiredannotation verifies the JWT, but does not cover if the protected API receives the same mobile with the mobile in the JWT.Imagine this case, the order submit form requires a mobile phone number.
The customer needs to finish the sms verification process to make sure he/she is the owner of the mobile phone number that is submitted.