search

ajency / finaegis-product

0 stars 0 forks source link

Handle logging of a user after 3 months #39

Open georgioajency opened 4 years ago

georgioajency commented 4 years ago

This is the situation that the phone number may be refreshed by the service provider if not used in 3 months. Hence someone else may get the phone number and may try to log in.

georgioajency commented 4 years ago

For this the proposed solution we decided was not to allow user access to the app until they enter their PAN number. So the flow will be

Login -> Enter phone -> Confirm OTP -> Looks like its been a while since you visited Finaegis. Could you please confirm your identity by entering your PAN number. Enter PAN -> Verify and Enter OTP (OTP sent to registered email id) -> Verified

https://xd.adobe.com/spec/85b4206f-9434-4d7b-923e-dffdf2e09306-d0e7/screen/ab8ad0a1-6c99-4283-aeee-c5689d14258c/

If correct, user is confirmed. If incorrect 10 times then the user cannot input PAN anymore and will be locked out and a full page to contact support will appear.

sharangsamonkar commented 4 years ago

@shivam-kurtarkar Are we handling the OTP part?

georgioajency commented 4 years ago

Need design for no. of times exceeded.