User Story #3730
Updated by Khadija Mezghani about 1 month ago
As a user, I want to authenticate to PixiPortal, so that I can securely access the platform. Acceptance Criteria: - Successful login: Given a user has an active account, And enters a valid email and correct password, When they click "Log in", Then they are authenticated and redirected to their personal space. -Missing fields: Given given a user submits the form without filling in the email or password, Then login is refused, and a message indicates the missing fields. -Invalid credentials: Given a user enters an incorrect email/password combination, or an email that doesn't correspond to any account, Then the login fails, and a single generic message is shown ("invalid credentials"), without indicating whether the email exists in the system. -Deactivated account: Given a deactivated user attempts to log in, Then access is refused and a message informs them their account is inactive. -Logout: Given an authenticated user, When they click "Log out", Then their session ends and they are redirected to the login page. "Note: US01, US02, US03 & US08 are pushed by the same ID #3752"