Short answer: a passwordless phone login is a sound fit for a gaming storefront, provided the Express/Node. js backend owns the SMS OTP resend cooldown, maximum verification attempts, and anti-abuse counters rather than accepting any of those decisions from the browser or game client. The page a...
Source: [Dev.to](https://dev.to/ignatiuscole6932/nodejs-passwordless-phone-login-sms-otp-resend-cooldowns-and-attempt-caps-59b0)