[spike] how to implement SMS-based auth on webapp

[pfortuna]

Find the most user-friendly way of implementing SMS-based authentication.

The method must be trustable. SIM hijacking is out of scope as it isn't something we can easily fix.

Explore at least Amazon SMS services and Twilio offerings.

Write down a summary of the implementation steps, split between things we need to do in the DB, things we need to do in the backend and things we need to do in the frontend.

[gpirescampos]

This ticket was created 25 days ago, so I'm not sure if this is still something you're looking to implement. I'll leave my comment with what could be done, and I'm happy to detail the implementation afterwards if I get a response :)

Anyway, I saw that you're already using AWS Lambda in the backend, so maybe an idea could be to use AWS Cognito for user authentication. With AWS Amplify, it's fairly easy to implement a registration/authentication workflow ( they have specific libraries for Angular), that can also do MFA and Social Sign In. Given that, some research needs to be done to understand how we would migrate the current implementation.