[User Story] - As a registered user, I want to log in to the system using my username and password so that I can access my personal account.

[ichirokentaro]

User Story:

As a registered user, I want to log in to the system using my username and password so that I can access my personal account

Acceptance Criteria:

1. The user can enter their username and password in the login form.
2. The system validates the username and password.
3. If the login is successful, the system redirects the user to the application's main page.
4. If the login fails, the system displays an appropriate error message.
5. There is a "Remember me" option so that the user doesn't need to enter their login information again on the next visit.
6. There is a link to reset the password if the user forgets their password.
7. Support login with social media accounts: Google, Microsoft
8. Display the password as special characters instead of plain text.

Acceptance Criteria:

1. Login Page Display:

   • Given I am a registered user,
   • When I navigate to the login page,
   • Then I should see fields for username and password,
   • And I should see a "Login" button,
   • And I should see a "Forgot Password?" link.

2. Successful Login:

   • Given I am a registered user with a valid username and password,
   • When I enter my valid username and password,
   • And I click the "Login" button,
   • Then I should be redirected to my personal account dashboard,
   • And I should see a welcome message with my username.

3. Unsuccessful Login with Incorrect Credentials:

   • Given I am a registered user,
   • When I enter an incorrect username or password,
   • And I click the "Login" button,
   • Then I should see an error message indicating that the username or password is incorrect,
   • And the error message should be displayed above or below the login form.

4. Unsuccessful Login with Empty Fields:

   • Given I am a registered user,
   • When I leave the username or password field empty,
   • And I click the "Login" button,
   • Then I should see an error message indicating that both fields are required,
   • And the error message should be displayed above or below the login form.

5. Password Visibility Toggle:

   • Given I am on the login page,
   • When I enter my password,
   • Then I should have an option to toggle the visibility of my password,
   • And the password should be masked by default.

6. Remember Me Option:

   • Given I am on the login page,
   • When I see a "Remember Me" checkbox,
   • And I check the "Remember Me" option,
   • And I log in successfully,
   • Then my login information should be remembered the next time I visit the site.

7. Forgot Password Link:

   • Given I am on the login page,
   • When I click the "Forgot Password?" link,
   • Then I should be redirected to the password recovery page.

8. Security and Session Management:

   • Given I have successfully logged in,
   • When I navigate to a different page and return to the login page,
   • Then I should remain logged in and not be prompted to log in again.

9. Logout Functionality:

   • Given I am logged into my account,
   • When I click the "Logout" button,
   • Then I should be logged out and redirected to the homepage or login page,
   • And I should receive a confirmation message that I have logged out successfully.

10. Account Lockout after Failed Attempts:

    • Given I am a registered user,
    • When I enter an incorrect password multiple times (e.g., 5 times),
    • Then my account should be locked for a certain period (e.g., 15 minutes),
    • And I should receive a message indicating that my account is temporarily locked due to multiple failed login attempts.

These acceptance criteria ensure the login functionality is user-friendly, secure, and provides clear feedback for both successful and unsuccessful login attempts.