The request
“Draw a login flowchart: start, enter username and password, validate credentials, loop until the maximum attempt limit, lock the account after the limit, otherwise send and validate a one-time password, then end after successful login or account lock.”
Then tryAdd a password reset after invalid credentials.Add a remembered-device option after OTP validation.
What is in this drawing
Read the decisions behind it.
01
Validate credentials against stored hash
02
Send OTP via email/SMS for two-factor authentication
03
Lock account after e.g., 3 failed attempts
04
Retry on invalid OTP
When designing login systems with MFA, brute-force mitigation, and account lockout policies.
More like this