App Verify API - Review required permissions

This page describes permissions you will need to take into consideration when designing your app.

Required permissions

Beginning with Marshmallow, you must explicitly request certain permissions you need for your application. This section displays all permissions you may potentially need.

  • android.permission.READ_PHONE_STATE - You must ask the end user to grant this permission.) Allows read only access to the phone's state, and is used to determine the status of any ongoing calls. You need this permission so you can verify that your end user receives a phone call from Telesign.

  • android.permission.CALL_PHONE - (When you ask the end user to grant the READ_PHONE_STATE permission, Android bundles this one in with it.) You need this permission so you can cancel phone calls from Telesign.

  • android.permission.INTERNET - Allows applications to open network sockets.

  • android.permission.ACCESS_NETWORK_STATE - Allows applications to access information about networks.

  • android.permission.READ_CALL_LOG - Allows applications to access end user’s call logs, for the purpose of reading verification codes.

Required permissions for Android O

If you are targeting your application for Android O, the device must explicitly add android.permission.READ_PHONE_STATE and android.permission.CALL_PHONE in the manifest.xml in order for the App Verify API SDK to read the verify code in the phone call and terminate the phone call. Previously, if you added android.permission.READ_PHONE_STATE in manifest.xml it would grant all permissions in the group (the group includes android.permission.READ_PHONE_STATE and android.permission.CALL_PHONE).

WHAT'S NEXT

App Verify API - Review app best practices