Add Phone Verification for new Users

[svenefftinge]

In order to reduce the ever increasing amount of abuse on Gitpod, we'd like to make it hard for such people to get onto Gitpod. The hypothesis is that phone number verification would add an extra step that can reduce the amount.

The verification should happen before after signup but before they can start their first workspace. We could further reduce the friction for good users by whitelisting based on certain criteria (e.g. age of GH or GL account).

The verification should only be active on SaaS and we should make use of an external service such as Twillio's Verify.

See design specs below. 🥯

[gtsiolis]

Cross-posting also some relevant meeting notes (internal) and two relevant RFCs[1][2] (internal).

Moved this also to Scheduled (ETA: ~10 days) in product design board. 🎹

[gtsiolis]

Moving this to In Progress to catch up with the recently open #11346. Cc @svenefftinge

[gtsiolis]

Adding below some early designs on how the flow could look like, depending on the third party service API flexibility and if we're going to also block or allow dashboard access when a user has not completed user validation:

Modal (Empty)	Modal (Input)	Modal (Invalid Input)

Verification (Sent)	Verification (Resent)	Verification (Input)	Verification (Invalid Input)

Verification (Progress)

Validation Required Alert

See design specs.

[atduarte]

Phone number verification example from Kaggle: https://www.loom.com/share/0e7d8b3bf7d2422aa6770ca37089d349