Implementing Multi-Step Authentication with Separate Brute-Force Protections

Hello, Our application has a complex authentication process. When a user enters their email and password, we first verify the email by calling a URL to check if it exists in the database. If the ema...