As a system
I need to verify that the password being used is correct
So that only authorized users can access accounts
Details and Assumptions
The system will check the entered password against the stored hash for the account.
Passwords will be encrypted and stored securely using a hashing algorithm.
Acceptance Criteria
Scenario: Correct password entered
Given a user has entered their username or email
When they enter their correct password
Then they are successfully logged into their account
And they are redirected to their user homepage
Scenario: Incorrect password entered
Given a user has entered their username or email
When they enter an incorrect password
Then they are shown a message that their password is incorrect
And they are given an option to retry or reset their password
As a system I need to verify that the password being used is correct So that only authorized users can access accounts
Details and Assumptions
Acceptance Criteria