How to safely make confirmation by SMS in a mobile application?

Question

JavaScript

If someone evil finds out the API address, it can cause material damage. Therefore, the question arose: how to safely make confirmation by SMS in a mobile application? There is an idea to send md5-hash, which is generated based on the phone number + "salt". It is easy to check on the server side, it seems safe, but Android applications, as I understand it, can decompile?! And then the "salt" will go into the wrong hands.

Answer 1

That's right, in splice , unlike slice , the number of elements to be removed is indicated.

Answer 2

In fact, you need to use the OS's built-in encryption mechanisms. They can generate all sorts of keys and store them in the phone's memory so that no one can get it. Generate such a key, if it did not already exist, Transfer it via https to your server and then encrypt and decrypt all communications between the application and the server with this
PS key, if possible, refuse expensive SMS, use PUSH

Answer 3

https://www.sinch.com/