Passwordless Phone Login: SMS OTP Cooldown and Max Attempts

Treat passwordless phone login as a small SMS OTP state machine, not as two Express or Node.js handlers named "send" and "check." For an edtech contact form, the useful decision rule is to authenticate control of the phone number first and route the submitted issue second; keep cooldowns, send quotas, max attempts, and one-time consumption in one... Weiterlesen