需求
“Draw a login flowchart: start, enter username and password, validate credentials, loop until the maximum attempt limit, lock the account after the limit, otherwise send and validate a one-time password, then end after successful login or account lock.”
接著試試Add a password reset after invalid credentials.Add a remembered-device option after OTP validation.
這張圖裡有什麼
看懂背後的決策。
01
Validate credentials against stored hash
02
Send OTP via email/SMS for two-factor authentication
03
Lock account after e.g., 3 failed attempts
04
Retry on invalid OTP
When designing login systems with MFA, brute-force mitigation, and account lockout policies.