Custom amplify passwordless auth for flutter

Question

Been following up on the following post.
https://aws.amazon.com/blogs/mobile/how-to-create-a-one-time-password-authentication-flow-using-amplify-flutter/

What I am trying to achieve is auth using just the phone number, no password or email.

Article points me in the right direction, but wanted to know if there was already another resource for phone number & SMS otp? If not, two more questions please;
1. I'm assuming what I need to look at is replacing SES with SNS, is that correct?
2. Is there a reason, maybe security related, that email otp is supported, while phone number is not?

Accepted Answer

Yes, you can replace SES with SNS. The reason why email OTP is supported but not phone number OTP is because it is easier to authenticate an email address than a phone number. Email addresses are public information, while phone numbers are not. Therefore, it is easier to verify an email address than a phone number. Additionally, email is more secure and less prone to malicious attacks than SMS messages.

Custom amplify passwordless auth for flutter

相關內容