Verify Silent Network Auth Testing Guide

• Create a Twilio Account
  • Note your Account SID and Auth Token from the Console.
• Request access to the API and Live Test Number feature. If there are no issues, access will be granted within 24 business hours.
• Create a Verify Service
  • Note your Service SID from the Verify Services tab in the Console.
• You will need to use a smartphone associated with an approved carrier (e.g. an iPhone with a Verizon Wireless phone number)

You also have the option to test SNA without carrier approval or a valid Live Test Number. In this testing flow, use Twilio Region US1 for your requests to Start a New SNA Verification for any mobile number and Invoke the SNA URL as described in this guide. Note that requests made to regions outside US1 in this testing flow will fail. When you reach the Check the Verification Attempt result step, you will receive an expected error code.

To begin, use the Start New Verification endpoint with the parameter channel=sna to create a new SNA Verification.

1
// Download the helper library from https://www.twilio.com/docs/node/install
2
const twilio = require("twilio"); // Or, for ESM: import twilio from "twilio";
3

4
// Find your Account SID and Auth Token at twilio.com/console
5
// and set the environment variables. See http://twil.io/secure
6
const accountSid = process.env.TWILIO_ACCOUNT_SID;
7
const authToken = process.env.TWILIO_AUTH_TOKEN;
8
const client = twilio(accountSid, authToken);
9

10
async function createVerification() {
11
  const verification = await client.verify.v2
12
    .services("VAaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa")
13
    .verifications.create({
14
      channel: "sna",
15
      to: "+15017122661",
16
    });
17

18
  console.log(verification.sid);
19
}
20

21
createVerification();

1
{
2
  "sid": "VEaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
3
  "service_sid": "VAaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
4
  "account_sid": "ACaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
5
  "to": "+15017122661",
6
  "channel": "sna",
7
  "status": "pending",
8
  "valid": false,
9
  "date_created": "2015-07-30T20:00:00Z",
10
  "date_updated": "2015-07-30T20:00:00Z",
11
  "lookup": {
12
    "carrier": {
13
      "mobile_country_code": "311",
14
      "type": "mobile",
15
      "error_code": null,
16
      "mobile_network_code": "180",
17
      "name": "T-Mobile USA, Inc."
18
    }
19
  },
20
  "amount": null,
21
  "payee": null,
22
  "send_code_attempts": [
23
    {
24
      "time": "2015-07-30T20:00:00Z",
25
      "channel": "sna",
26
      "attempt_sid": "VLaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
27
    }
28
  ],
29
  "sna": {
30
    "url": "https://mi.dnlsrv.com/m/id/ANBByzx7?data=AAAglRRdNn02iTFWfDWwdTjOzM8o%2F6JB86fH%2Bt%2FFftUPj0pFA0u8%2FibWuYwzmMeMOtdTwYlsO8V%2FXF%2BJmngMhbeGKYhHeTOF2H9VrGEYKcEEklPxHgb5GgL3XtYa33j3lIU%2By6InvoV%2FowWHBzA0QeFPBh6vmJ8LoUPJqGE7q0PRz618Z4ym1AGq%2BaomSq9PlP4rCduv9Cmtxu%2FrvPSBwocs0GCWDE8seK8t9epmPQW7gwODxkAiKr9UxhJd9KvmBVuAQPf%2BoFQVo86USXkhXqTvUzB2bNUYY9FCy3CWgZFTOa1D3H1CVxf1eHzYIswNA7SmOzP%2FBX8g6%2B0hkzwMRkcit3gBNs4evAVJiqAgYvUlrtGwwv9bFx4X7jWSHY4%3D&cipherSalt=yANeDq09bwM38SJs"
31
  },
32
  "url": "https://verify.twilio.com/v2/Services/VAaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/Verifications/VEaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
33
}

Check your response from the Start New Verification endpoint for the sna.url property. The SNA URL is unique for every Verification Attempt, has a default time-to-live of 10 minutes, and can only be processed once. Once it has been called, it will not be valid anymore.

Note its value for use in the next step:

1
"sna": {
2
     "url": "https://mi.dnlsrv.com/m/id/ANBByzx7?data=AAAglRRdNn02iTFWfDWwdTjOzM8o%2F6JB86fH%2Bt%2FFftUPj0pFA0u8%2FibWuYwzmMeMOtdTwYlsO8V%2FXF%2BJmngMhbeGKYhHeTOF2H9VrGEYKcEEklPxHgb5GgL3XtYa33j3lIU%2By6InvoV%2FowWHBzA0QeFPBh6vmJ8LoUPJqGE7q0PRz618Z4ym1AGq%2BaomSq9PlP4rCduv9Cmtxu%2FrvPSBwocs0GCWDE8seK8t9epmPQW7gwODxkAiKr9UxhJd9KvmBVuAQPf%2BoFQVo86USXkhXqTvUzB2bNUYY9FCy3CWgZFTOa1D3H1CVxf1eHzYIswNA7SmOzP%2FBX8g6%2B0hkzwMRkcit3gBNs4evAVJiqAgYvUlrtGwwv9bFx4X7jWSHY4%3D&cipherSalt=yANeDq09bwM38SJs"
3
}

You can invoke the URL by sending it to yourself through either email or Slack following the *special instructions* below.

Copy and paste the SNA URL and send it to yourself via email.

Expand image

Note: Some email clients have security features, such as Microsoft's Safe Links, that scan and open any embedded URLs in the email. The SNA URL is a one-time URL and can be made invalid during such security processes. To work around this in testing, you can use an email client that does not have this kind of security feature or modify the SNA URL from https://... to hxxps://... so the URL is non-clickable and change it back to https://... when you're ready to invoke it on your device. Other mobile email clients do not display the URL, even though the email is received. However, if you forward the email, the URL will be displayed.

To send the SNA URL in Slack, paste it into a preexisting code block. You must create a code block first because pasting the SNA URL directly into the message composer will cause Slack to automatically invalidate the URL.

Expand image

Create the empty code block using these keyboard shortcuts:

• Mac: Shift + Option + Command + C
• Windows: Ctrl + Alt + Shift + C

Then paste the SNA URL into the code block and send the message.

Before tapping the SNA URL, ensure that your mobile phone's Wi-Fi is turned off and that it is only using cellular data connection. Tap the SNA URL to continue the authentication process. It should open up in your default browser and after a processing time of four seconds or less, land on a screen that looks similar to this:

Expand image

You can now exit the browser, no further action is required with the response shown on this screen.

Next, send a request to the Verification Check API to confirm that the SNA URL invocation and Verification Attempt were successful.

1
// Download the helper library from https://www.twilio.com/docs/node/install
2
const twilio = require("twilio"); // Or, for ESM: import twilio from "twilio";
3

4
// Find your Account SID and Auth Token at twilio.com/console
5
// and set the environment variables. See http://twil.io/secure
6
const accountSid = process.env.TWILIO_ACCOUNT_SID;
7
const authToken = process.env.TWILIO_AUTH_TOKEN;
8
const client = twilio(accountSid, authToken);
9

10
async function createVerificationCheck() {
11
  const verificationCheck = await client.verify.v2
12
    .services("VAaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa")
13
    .verificationChecks.create({ to: "+15017122661" });
14

15
  console.log(verificationCheck.sid);
16
}
17

18
createVerificationCheck();

1
{
2
  "sid": "VEaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
3
  "service_sid": "VAaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
4
  "account_sid": "ACaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
5
  "to": "+15017122661",
6
  "channel": "sna",
7
  "status": "approved",
8
  "valid": true,
9
  "amount": null,
10
  "payee": null,
11
  "sna_attempts_error_codes": [
12
    {
13
      "attempt_sid": "VLaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
14
      "code": 60001
15
    }
16
  ],
17
  "date_created": "2015-07-30T20:00:00Z",
18
  "date_updated": "2015-07-30T20:00:00Z"
19
}

Check your response from the Verification Check API for the status property. approved means that SNA successfully confirmed user possession of the mobile number provided.

"status": { "approved" }

Check your response from the Verification Check API for the sna_attempts_error_codes property. If one or more errors occurred during the SNA process, you will see a list of error codes here. The attempt_sid property refers to the specific Verification Attempt that was created with the Start New Verification endpoint.

You can check the Error and Warning Dictionary for more information on error codes including their possible causes and solutions.

1
"sna_attempts_error_codes": [
2
    {
3
      "attempt_sid": "VLXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
4
      "code": 60001
5
    }