I'm trying to find an OAuth provider that doesn't require a password but instead, it authenticates the user by sending a message to a phone number. I'm thinking that it would be using the phone the same way as you would use two-factor-authentication but without the password.
So far I couldn't find any. Does such provider exist?
If it does exist then what risks associated with such a use-case do you see?