How can I attach a phone number field to the user account and optionally validate it via SMS?

Question

On my site, after registering their account, I want users to optionally be able to go to their account page, input a phone number, and then verify that number by SMS. When they verify the phone number, I want to award a special role (ideally via Rules).

It seems like there are several modules that might be able to do this:

• Two-factor authentication-- this supports SMS with the TFA Basic plugins, but I don't want to use SMS for authentication, just once to verify the number.
• Twilio-- this module has user phone number verification, but it does it in a special database table (not a Drupal field) and does not have a rules event for "when a number is verified."
• SMS Framework-- this module contains a submodule ("SMS Framework Users") for phone number verification, but it only works on registration; there is no option to register a number later (and in my case, I do not want to collect numbers on registration; I want to collect numbers later optionally).

Related questions:

• Verification code when adding new number
• Cell phone validation using SMS message

Answer 1

To address the modules mentioned:

1. This is a non-starter as it's a different use case from SMS number verification.
2. Here you'd have to build off the back the Twilio module. You could modify user setting form twilio_user_settings_form() so that the callback twilio_user_settings_confirm_form_submit() is altered with your own custom callback that triggers a callback. Alternatively, you could evoke a hook_user_presave() as twilio_user_settings_confirm_form_submit calls user_save() with 'status' => TWILIO_USER_CONFIRMED, in the $edit array. In either case, you'd have to build/evoke your own custom rules event.
3. The SMS User module does provide verification for existing users. The form can be found under the path user/{UID}/edit/mobile. It triggers User validated SMS code event once the user has completed the verification process.

Given the above, both modules can achieve what you're looking for, it's just a matter of how much modification vs. what each service provides (Twilio vs. any other SMS Gateway provider).

Answer 2

I managed to do this with the Twilio module.

1. First I applied a patch to get the "when a number is verified" rules event.
2. The path for Twilio phone number verification is /user/UID/edit/twilio.
3. The text strings in this module required heavy revision (English not quite accurate, lack of punctuation, etc.)

I then used Rules, Panels, Flag, and other modules to make a custom flow in which users are prompted to verify by SMS after registration.

Answer 3

You can do this with the Mobile Number module that I wrote. And using rules you can check the number was verified.

Mobile Number is a field type that provides mobile number validation and verification, and can be used for two factor authentication. It works with SMS Framework and TFA modules, respectively, and both features are optional.