Skip to content

fix(server-gsm): require verified phone number for outgoing SMS - #375

Merged
Adamskiee merged 2 commits into
developfrom
bugfix/server-gsm-verified-sender
Aug 15, 2026
Merged

fix(server-gsm): require verified phone number for outgoing SMS#375
Adamskiee merged 2 commits into
developfrom
bugfix/server-gsm-verified-sender

Conversation

@Adamskiee

@Adamskiee Adamskiee commented Aug 15, 2026

Copy link
Copy Markdown
Collaborator

Summary

This pull request enforces a verified phone number policy for sending outgoing SMS messages through the GSM module.

Changes Included

  • Server: Updated server/app/api/gsm.py to validate that the sender's phone number is verified before allowing an SMS to be queued.
  • Tests: Added and updated unit tests in test_gsm_proxy.py to cover the new verification logic.
  • API Spec: Updated docs/api/openapi/gsm-sms.yaml to reflect new error responses for unverified numbers.
  • Documentation: Added documentation on the verified SMS sender policy across the system design docs, requirements, and the mobile app API documentation.

@Adamskiee Adamskiee changed the title fix(gsm): document verified SMS sender policy fix(server-gsm): require verified phone number for outgoing SMS Aug 15, 2026
@Adamskiee
Adamskiee merged commit f10c074 into develop Aug 15, 2026
5 checks passed
@Adamskiee
Adamskiee deleted the bugfix/server-gsm-verified-sender branch August 15, 2026 15:47
Adamskiee added a commit that referenced this pull request Aug 16, 2026
…rict environment config

This release merges the latest changes from `develop` into `main`, bringing in significant enhancements and bug fixes across the server, GSM module, and mobile components.

Key Changes:

GSM & Networking:
- GSM Emulator: Added a new virtual modem development stack for testing without physical hardware (#373).
- GSM Security & Routing: Secured SMS delivery (#362), required verified phone numbers for outgoing SMS (#375), and routed gateway traffic correctly on the Docker network (#372).

Server & Environment:
- Typed Configuration: Introduced strict typed environment configuration (#363), failing fast when GSM_SECRET is unset (#361), and replacing example secrets in configs (#366).
- API & Data Integrity: Hardened error handling logs, made role writes atomic (#377), ignored activity writes for deleted users (#374), and hardened QA route guards (#367).

Mobile:
- Connectivity: Refactored connectivity to remove the background signaling task (#364).
- EAS Debugging: Enabled the debug menu in preview builds (#360).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant