A solicitação
“Draw a login flowchart: start, enter username and password, validate credentials, loop until the maximum attempt limit, lock the account after the limit, otherwise send and validate a one-time password, then end after successful login or account lock.”
Depois, tenteAdd a password reset after invalid credentials.Add a remembered-device option after OTP validation.
O que há neste desenho
Entenda as decisões por trás dele.
01
Validate credentials against stored hash
02
Send OTP via email/SMS for two-factor authentication
03
Lock account after e.g., 3 failed attempts
04
Retry on invalid OTP
When designing login systems with MFA, brute-force mitigation, and account lockout policies.