android - How would you implement an unregistered login?

Question

For example, if I use this code shown in this answer: Programmatically obtain the phone number of the Android phone

Is it technically possible for a user to fake that number?

I'm thinking about developing an app which uses telephone number as unique id, as if it were an username.

What do you think guys?

What is around my head, is to find out a way to make users "login" to a webservice but without any register. Though about IMEI or Telephone number, but I think both of them can be faked. Also they could trace the webservice's url and fake the POST info sent.

Maybe the best solution is OAUTH auth from facebook / google / twitter?

Any help would be appreciated.

Thanks!!

Answer 1

IMEI 和电话号码都可以伪造。如果您想使用电话号码，您可以向该号码发送带有验证码的短信，应用程序将检查代码是否正确。这就是 Whatsapp 和其他应用程序所做的。