This topic describes the limitations for integrating the one-click logon feature with different clients.
H5 client carrier limitations
When both the mobile data network and Wi-Fi are enabled, JavaScript (JS) cannot force a browser to use the mobile data network to retrieve a phone number. If a device connects to a shared hot spot, retrieving the number through the Wi-Fi channel might obtain the hot spot owner's mobile phone number. To prevent this security risk, the one-click logon process for H5 clients requires the user to enter the middle four digits of their mobile phone number.
When a user enters an incorrect phone number multiple times, different carriers apply different limits on verification attempts:
China Telecom
There is no limit if the phone number is entered correctly. If the number is entered incorrectly three times in a row, the phone number is locked for 24 hours. Verification is not possible during the lock period. Manual unlocking is not supported.
If a number is locked due to too many incorrect entries, the server-side returns a specific error code:
"code":"ERROR_MOBILE_OVER_LIMIT"
"dynamicMessage":"mobile failed too much"
China Mobile
There is no limit if the phone number is entered correctly. If the number is entered incorrectly three times in a row, the phone number is locked for 24 hours. Verification is not possible during the lock period. Manual unlocking is not supported.
If a number is locked due to too many incorrect entries, the frontend getLoginToken pre-fetch request fails, and the authorization page cannot be displayed.
China Unicom
No related restrictions.