Implement Two-Factor Authentication for Admin Role

[Yousuf24100286]

Description:

Add two-factor authentication (2FA) for users with the admin role. On admin login, send a 6-digit code via email for verification.

Features: User Authentication API

Requirements:

• Send 6-digit code to admin's registered email on login.
• Implement code entry and verification in the login process.
• Ensure code expiration (e.g., 10 minutes) and implement security measures.

Tasks:

• Implement functionality to generate and email a 6-digit code to admin.
• Update the login process to include a step for entering the 6-digit code.
• Implement code verification logic with expiration.

Concerns

Raised for @hammadtariq838 and @adeel838 to answer

• Should the user session start after entering the code or when requesting for login
• Code is defined to be 6 numbers but should it be in string format or number format

[adeel838]

Session should not start after inputting code, but when user logs in. @hammadtariq838 can guide more on this

It's better code should be a number

[Yousuf24100286]

not start after inputting code, but when user logs in.

so session should start at the input of email and password ?