Linking mobile numbers

A login code by SMS requires the mobile number to be linked to a customer account. This page describes the three ways in which the link is created – automatically at registration, through the SMS login with email confirmation, and manually in the customer account – and what applies in "Email only" mode.

Automatically at registration

When a new customer account is created, the extension checks the phone number of the default billing address. If it is a valid mobile number (validated against the billing address country), it is stored in international format and linked to the new account – but only if the same number is not already linked to another account. The customer then sees a success message: "Your mobile number … has been linked to your account. You can now log in faster with a login code by SMS."

Landline numbers and invalid entries are silently skipped – registration continues as normal, nothing is linked. So that the phone field appears at registration in the first place, the extension switches on Shopware's "Show phone number field" setting at installation. An optional note next to the phone field explains the later login without a password; its text is an editable snippet.

Linking through the SMS login

If a customer requests a login code for a mobile number that is not yet linked to any account, a two-step flow runs – SMS first, email to confirm:

1. The customer receives the login code by SMS and enters it correctly. The number is now proven, but there is no account for it. The extension creates a pending link – bound to the current browser session and valid for 20 minutes (1200 seconds).
2. The customer sees the message "Almost done. Please confirm your email to finish logging in. We'll link … to your account so you can log in faster next time."
3. The customer logs in with a login code by email in the same session. Only after that login is the link applied; a previously linked number on the account is replaced, and the success message appears.

In these cases the pending link is not applied:

• Window missed: after 20 minutes the pending link expires; nothing changes.
• Conflict: if the number was linked to another account in the meantime, the pending link is discarded.
• Different session: the pending link is bound to the browser session. Logging in from another browser or device does not apply it.
• Password login: only a login with a login code by email applies the link; a password login does not.

Editing in the customer account

Logged-in customers manage their number themselves: in the customer account under Your profile, in the field "Mobile number for login". Saving the field empty removes the link. Exactly one number is linked per account; it is stored in international format.

On save, the extension checks two conditions:

• Mobile number required: landline numbers and invalid formats are rejected – "The mobile number format is invalid. Include the correct country code and use international format, e.g. +44 7400 123456."
• Uniqueness: a number can only be linked to one account – "This mobile number is already linked to another customer account. Use a different number or log in to the account that uses it."

Behaviour in "Email only" mode

If the setting Login methods offered to customers is "Email only", no new links are created: nothing is linked at registration, the SMS login (and with it the SMS linking path) is switched off, and the field in the customer profile is hidden. Numbers that are already linked remain stored but are not used for login while the mode is active.