OTP Login Addon for Luxa Users Pro

Passwords get forgotten, reused, and phished. OTP Login gives your users a faster, safer alternative: enter your email, get a 6-digit code, sign in. It sits right alongside the standard login form as an optional toggle, so nobody loses their existing password-based habit — they just get a better option when they want it.

Features:

• Passwordless sign-in via a 6-digit code emailed to the user
• Rate-limited code requests (max 3 per 15 minutes) to prevent mail-bombing
• Rate-limited verification attempts (max 5 tries) to prevent brute-forcing the code
• Fully routed through Luxa Users’ LoginGuard — an OTP login can never bypass 2FA, a pending-approval hold, or a suspended account
• Seamless hand-off into the 2FA panel if the account has Two-Factor Authentication enabled
• Adds a simple toggle link to the existing login form — no separate page needed

Changelog:

= 0.1.0 =
* Initial release
* Email-based OTP login with rate limiting and brute-force protection
* Full LoginGuard integration (2FA, pending-approval, and suspended-account compatible)
* Note: SMS and WhatsApp delivery channels are planned for a future release