Drop SMS verification for the phone field on signup

RefactorSecurityService
Shipped
April 24, 2026 at 1:35 AM UTC
Author
Kamo
Commit
b2c43b1

The phone number collected during self-service registration is now a plain optional text field — no /register/phone/initiate, no SMS code, no /register/phone/verify. The register endpoint accepts the number as entered, normalizes whitespace/punctuation, validates the E.164-ish format server-side, and stores it on the new User. Removes the RegistrationPhoneService class and the two SMS endpoints that were wired into SecurityController, and drops the phoneCodeId branch from the register handler.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing