Advanced concepts
Last updated
Was this helpful?
Last updated
Was this helpful?
The OTP (One-Time Password) validation feature is designed to verify a user's identity while filling out a form. This helps enhance security and prevent unauthorized access.
OTP validation is applied to:
The Phone Number field
The Email field
The user enters a phone number or email.
The user clicks "Get OTP".
An OTP is sent to the provided phone number or email.
The user enters the OTP in the verification field.
The system validates the OTP.
If correct, the user's phone number/email is verified.
If incorrect, the user can reattempt verification.
Once verified, the user can proceed to submit the form.
Failed OTP Attempts Lockout:
If a user enters an incorrect OTP 5 times, they are temporarily blocked from requesting another OTP.
Lockout duration is configurable based on system policies.
Re-verification for Previously Verified Users:
A user who has successfully validated once should not be asked for OTP verification again while filling out the form.
The duration before re-verification is required is configurable.
Revalidation After OTP Verification (But Before Submission):
If a user verifies their phone/email but does not submit the form, they must be asked for another OTP after a set time.
Example: If a user verifies their identity but does not submit the form within 60 seconds, they must revalidate before form submission.
This time interval is configurable.
Phone Number Input with OTP Trigger:
A user enters a phone number (e.g., +91 9999999999) and clicks "Get OTP".
OTP Confirmation Screen:
The system prompts the user to enter a 4-digit OTP sent to their number.
A resend timer prevents immediate retriggering of the OTP.
Form Submission Process:
If the user validates the OTP but does not submit the form within the defined time, re-verification is required.
Rate Limiting: Restricts excessive OTP requests to prevent abuse.
Configurable Expiry Time: OTP validity and expiration duration can be adjusted per security policies.
