User Login with MFA Using TOTP Sequence Diagram

This sequence diagram is used to detail the exact request/response flow for a browser login that requires TOTP-based MFA, including challenge creation and session issuance. It helps teams verify responsibilities and data passed between the Browser, Identity Service, TOTP App, and Session Store—from POST /login through creating a pending mfa_challenge, submitting /mfa/totp, validating the code, and returning Set-Cookie session_id. Backend engineers, security engineers, and QA use it to implement, test, and troubles...