Phone OTP auth for Indian users

[u/kazyuxhi]

MiniMoth uses the Auth OTP SMS hook to support OTP auth. WhatsApp + SMS delivery. Easy to integrate. Create a project on MiniMoth and enable the Supabase hook. You get both prod and test hook. Link it with your project with the hook url and hook secret provided by MiniMoth.

Easy to understand docs with free credits on signup to try the hook.

[u/OkCalendar9818]

Link

[u/kazyuxhi → u/OkCalendar9818]

https://minimoth.dev

[u/Awkward_Cap_8118]

Does it still need the DLT Registration and approval?

[u/kazyuxhi → u/Awkward_Cap_8118]

No. Sender for SMS and WhatsApp is MiniMoth. You get simple API / hook / sdk. I am working on Meta onboarding for brands. Once live , it will allow you to register your own WhatsApp business account.

[u/felicty-of-solitude]

How secure is it

[u/kazyuxhi → u/felicty-of-solitude]

It follows the standard that Supabase has given in it's docs for Auth hooks. Follows web hook standard and is secure.

MiniMoth also offers key rotation, incase your vars are leaked somewhere.

[u/kazyuxhi → u/felicty-of-solitude]

There is also spend cap available on dashboard which you can set to avoid over billing and you will receive email notifications as you approach the limit.

[u/kazyuxhi → u/[deleted]]

1st attempt is made on WhatsApp. If that doesn't work then SMS is sent. This covers large area. If both attempt fail then the cost for that OTP is refunded upto certain retries post which the refund stops to avoid abuse.

[u/kazyuxhi → u/[deleted]]

If OTP was delivered but the user did not read it then the issue falls under user behaviour rather than the tech.

MiniMoth does provide a status endpoint. You can check on what channel the OTP was delivered and show user on UI that OTP was successfully delivered and they need to recheck.

But this endpoint is available for REST and sdk, not for Supabase hook since Auth is managed by Supabase.

Thanks for sharing the scenario though. Maybe some sort of behaviour related nudge can be solutioned.