Screw authorization through VK. Now there registration of an account requires binding to a phone number, so there is no difference with SMS registration, but it's easy to implement.
You can by this method
VK.api('users.get', { user_ids: vkVars['viewer_id'], //Передаём id пользователя, полученный от ВК, название переменной моё. fields: 'has_mobile, contacts', }, function(data) { //Тут обрабатывем данные. });
ask if a mobile phone is specified in the user's profile ( data.response[0].has_mobile === 1 , if specified), and the telephone number from the contact details if it is not hidden by privacy ( data.response[0].mobile_phone ). To verify the uniqueness of the user, the first field is interesting, since only one VC account can be associated with one number, while the phone from contacts is useful for feedback and may not coincide with the page to which it is attached.