Forum Discussion

cd's avatar
cd
Icon for Cirrus rankCirrus
Jul 10, 2019

OTP SMS with API (SMS Gateway)

Hello, I'd like to do OTP SMS via an HTTP API I'm reading this link but is it still up to date (February,2011) ? the VPE is still OK or maybe they are news things..   Should I still need the iR...
application delivery
BIG-IP Access Policy Manager (APM)
iRules
  • Imran_Abid's avatar
    Imran_Abid
    Jul 15, 2019

    Hi cd,

     

    I'm using a hardware device SMSEagle as my SMS gateway with APM.

     

    As Neils rightly said above, there is no need to use an iRule.

     

    I'm using these VPE agents in this particular sequence:

     

    OTP Generate

    HTTP Auth (to send the OTP as SMS)

    Logon Page (to collect the OTP)

    OTP Verify

     

    Please refer to attached screenshots.

     

    I hope it helps.

     

     

     

     

     

     

davidlime's avatar
davidlime
Icon for Nimbostratus rankNimbostratus
Dec 22, 2022

One-time password (OTP) SMS is a method of authenticating a user by sending a unique code to their phone via SMS, which the user can then enter to confirm their identity. This can be useful for adding an extra layer of security to online accounts or transactions.

To send OTP SMS messages using an API (Application Programming Interface), you will need to use an SMS gateway service that provides an API for sending SMS messages. There are many SMS gateway providers that offer API access, and the specific details of how to use the API will depend on the provider you choose.

Generally, you will need to sign up for an account with an SMS gateway provider and obtain API credentials (such as an API key or token) that you can use to authenticate your API requests. You will then be able to use the API to send SMS messages to phone numbers that you specify, including OTP messages.

For example, you might use the API to send an OTP message to a user's phone number when they request to reset their password on your website. The user would then enter the OTP code they receive via SMS to confirm their identity and complete the password reset process.

It's important to note that you will need to ensure that you are compliant with any relevant laws and regulations regarding the use of SMS messages, including obtaining the necessary consent from users before sending them SMS messages.

Source: SMSala