流星帐户自动登录模式? [英] Meteor Accounts autologin pattern?

问题描述

我正在考虑使用手机号码注册系统，通过该系统，某人可以使用手机号码注册并收到短信以验证它们是否存在...此时我希望它们自动登录在没有密码...(短信基本上是密码)

I'm thinking about a sign-up-with-mobile number system whereby someone can register with a mobile number and get a SMS to verify that they exist... at which point I'd like to have them automatically logged in without a password... (the SMS is basically a password)

这是在 Lyft 应用程序注册中的模式，不需要用户名/密码/等.

This is patterned on the Lyft app sign-up, which doesn't ask for a username/password/etc.

但对于我的生活，我不知道该怎么做.

But for the life of me, I can't figure out how to do this.

我对只有服务器的 Meteor.method 完全没问题，它以安全"的方式响应，但我不知道现在会是什么.

I'm totally fine with a server only Meteor.method which responds with something "secure" but I don't know what that would be now.

我唯一能想到的就是在用户上设置密码，然后将其传输到客户端并运行登录(这对我来说似乎不安全).

The only thing I can think of would be to set the password on the User and then transmit it to the client and run a login (which seems insecure to me).

我已经阅读了这篇很棒的文章https://meteorhacks.com/extending-meteor-accounts.html这是一个不错的选择，但我不知道有什么策略也不会绕过安全性

I have read through this great article https://meteorhacks.com/extending-meteor-accounts.html and it's a good option, but I don't know of a strategy for that which wouldn't bypass security too

(在某些时候，服务器必须安全地与客户端通信......)

推荐?

推荐答案

我做了一个包，可以帮助你，Meteor 账号手机，基于短信手机号码验证的登录https://github.com/okland/accounts-phone/ 享受！

I made a package that might help you, Meteor accounts phone, which do login based on sms mobile number verification https://github.com/okland/accounts-phone/ Enjoy!

这篇关于流星帐户自动登录模式?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！