JavaScript cannot force a browser to use the mobile data network to retrieve a phone number when both mobile data and Wi-Fi are active. If a device connects to a shared hot spot, using the Wi-Fi channel might retrieve the hot spot owner's phone number. This is a security risk. To prevent this, users must enter the middle four digits of their phone number for one-click logon on an H5 client. This topic describes carrier-side restrictions for the one-click logon and local number verification features when used on H5 clients.
One-click logon
When a user enters an incorrect phone number multiple times, different carriers apply different limits on verification attempts:
China Telecom
There is no limit if the phone number is entered correctly. If the number is entered incorrectly three times in a row, the phone number is locked for 24 hours. Verification is not possible during the lock period. Manual unlocking is not supported.
If a number is locked due to too many incorrect entries, the server-side returns a specific error code:
"code":"ERROR_MOBILE_OVER_LIMIT"
"dynamicMessage":"mobile failed too much"
China Mobile
There is no limit if the phone number is entered correctly. If the number is entered incorrectly three times in a row, the phone number is locked for 24 hours. Verification is not possible during the lock period. Manual unlocking is not supported.
If a number is locked due to too many incorrect entries, the frontend getLoginToken pre-fetch request fails, and the authorization page cannot be displayed.
China Unicom
No related restrictions.
Local number verification
China Mobile
The default verification limit for a single number is 10 times per 24-hour period.
For example, if the first request is made at 10:10 today, 10 requests can be made within the next 24 hours. After the 10th request, the number is restricted. The restriction is lifted at 10:10 the next day, and the counter resets.
China Unicom
No related restrictions.
China Telecom
No related restrictions.