Messaging • Verification
SMS & OTP System එකක් හදන්නේ කොහොමද?
SMS/OTP system එකට SMS send කරන API එකක් විතරක් ප්රමාණවත් නෙමේ. Code generation/expiry, rate limiting, retries, verification, fraud abuse controls, phone formatting සහ fallback/error UX plan කරන්න ඕන.
මේකේ main idea එක
Twilio Verify වගේ verification service එක verification lifecycle manage කරන tools දෙයි. Official best practices rate limiting, correct phone formatting, user confirmation සහ multiple channels ගැන guidance දෙනවා. Provider/region regulations සහ sender registration requirements වෙනස් වෙන්න පුළුවන්.
Practical checklist
- Phone number validation + country code
- OTP generation + short expiry
- Request rate limit/cooldown
- Attempt limits
- Secure server-side verification
- No OTP logging in plaintext where avoidable
- Delivery status/error handling
- Fallback/recovery flow
Sri Lanka business එකකට apply කරන්නේ කොහොමද?
Sri Lanka SMS provider එකක් choose කරනවා නම් sender ID, route quality, local regulations, pricing සහ delivery reports check කරන්න. Development environment එකේ test numbers/sandbox approach තිබේද බලන්න.
Step-by-step plan
- Provider choose + docs read කරන්න
- Verification flow wireframe කරන්න
- Backend endpoint + secure storage/state
- Rate limit + resend timer
- Failure/abuse tests + logs
Quick Note: OTP එක authentication factor එකක්; user password/session/token security වෙනම design කරන්න ඕන.