Closed linear[bot] closed 2 months ago
1. Require user to verify email upon when sign up 2. 2FA (send OTP to user email when login and verify OTP) 3. Use JWT for user authentication management 1. use djangorestframework-simplejwt 2. store the token in cookies with HttpOnly and Secure flags set