If the OTP verification route for both forgot password and login is shared, a potential security vulnerability arises. For instance, if someone registers for the first time while another user initiates a forgot password process simultaneously, there's a risk of mismatched passwords being saved. This could lead to unauthorized access, as the system might inadvertently associate the new password with the wrong user profile.
If the OTP verification route for both forgot password and login is shared, a potential security vulnerability arises. For instance, if someone registers for the first time while another user initiates a forgot password process simultaneously, there's a risk of mismatched passwords being saved. This could lead to unauthorized access, as the system might inadvertently associate the new password with the wrong user profile.