> ...if it needs to remember you, it should do so with tokens and one-time links, not user accounts or forgotten-password flows...
Not for me, thanks. I've skipped submitting job apps because of the Oracle HRM platform and having to visit my email an enter a six-digit code EACH time I wanted to submit an app, which required re-uploading a resume and re-correcting any parsing errors.
I will 100% skip your website if you rely upon cookies/OTP and don't let users create accounts (if they need one).
Not for me, thanks. I've skipped submitting job apps because of the Oracle HRM platform and having to visit my email an enter a six-digit code EACH time I wanted to submit an app, which required re-uploading a resume and re-correcting any parsing errors.
I will 100% skip your website if you rely upon cookies/OTP and don't let users create accounts (if they need one).