Verify OTP

import { Card, CardGrid, Steps, Aside } from ‘@astrojs/starlight/components’;

Table of contents

• I. Overview
• II. Step-by-step
• III. Resending the code
• IV. Common errors
• V. Related

Vietnamese version

Bản tiếng Việt: Nhập mã OTP.

I. Overview

/verify-otp is the second step of the password-reset flow. After you request a reset, we email a 6-digit code to your inbox. Enter it here to prove ownership and unlock the “Set new password” screen.

You must reach this screen from the Forgot-password screen — the OTP email and vendor_type are stored in sessionStorage. Direct navigation is bounced back to /forgot-password.

II. Step-by-step

1. **Open your email** and copy the 6-digit code. - The email is sent from `no-reply@lionpos.local` (test) or your production domain. - Subject: *"Your LionPOS password reset code"*.

2. Enter the code on /verify-otp.

   • The field accepts digits only; non-digit characters are stripped automatically.
   • Use paste (Ctrl/Cmd + V) — the field auto-trims to 6 characters.

3. Click “Verify code”.

   • On success you are routed to /reset-password to set a new password.

4. Set the new password (see Reset password).

III. Resending the code

Below the Verify code button there is a “Resend code” link.

1. Click **"Resend code"**. 2. Wait for the new email (1–2 minutes). 3. Enter the latest code — **older codes become invalid** the moment you click Resend.

Each Resend invalidates the previous code. If you typed a code from the first email and then clicked Resend, that first code will fail.

IV. Common errors

Banner	Meaning	Fix
Invalid or expired code.	Code is wrong, expired (>10 min), or already used	Click Resend and try again
This email is not registered.	sessionStorage lost the email (e.g. you opened this URL in another tab)	Restart from /forgot-password
Too many requests.	Resend rate-limit hit	Wait 60 seconds

V. Related

• Forgot password — Cashier — Step 1 (cashier).
• Forgot password — Owner/Employee — Step 1 (shared).
• Reset password — Step 3.