Provide phone number verification via SMS OTP using Prav app
Pirate Praveen Mon 10 Mar 2025 7:21AMPublicSeen by 25Currently we provide accounts on request and it involves a manual process. Prav is looking for gratis XMPP providers as a fallback option since Prav accounts need subscription and some people may not be able to/ want to pay. See https://codeberg.org/prav/pravserver/issues/21 for details. This would help us avoid the manual processing (we can still offer that to people who don't want phone number verification for more privacy) and prevent spam sign ups to a large extend (creating many phone numbers would be costly and riskier to do anonymously).
We will need to provide a component API to create users (may be later for directory query) and access to prav server to connect to this end point. ejabberd already has the required component code, we will have to write a component for prosody.
Buster Keaton
Tue 25 Mar 2025 5:43PM
Same concern as of Kannan. Phone numbers of future Durare users will be on Prav server, and as a result maybe they are discoverable via phone numbers too? What if users want to have account at both at prav and durare? Will it be linked and and identified through query by other users? I wouldn't want that.
The only advantage I see for durare is of no manual account processing. It will be of help to volunteers, but I don't want to have more liability on our side.
Kannan V M
Wed 26 Mar 2025 5:58PM
As durare is a free software community hosted project, I would recommend it to collect minimum possible data, phone number can be an identifiable information, which will add more liability in our side.
UPDATE: Durare will maintain status quo, anyone can create account by request. This effort is to add a new method of registration, using prav and phone number.
Since the status quo will be maintained, and this is an additional capability provided by prav, I change my vote to agree.
fugataMon 31 Mar 2025 9:49AM
Looks like I missed this poll.
My main concern is complication of Prav's onboarding flow. In Quicksy, it's very simple - enter phone number, enter OTP, enter display name. If we want to focus on mass adoption, we have to keep it just that simple, and minimize requiring users to learn new terms or concepts.
Custom username option, quicksy.im accounts option, durare.org accounts option...all of them will introduce complication and mental overhead for new users.
Badri Sunderarajan ·Tue 18 Mar 2025 12:52PM
A hacky JavaScript library that connects through Metronome through telnet to create accounts. I don't remember why it was done this way instead of using metronomectl, but just putting it here in case it's helpful. (For context, Metronome is a fork of Prosody with many similarities)