7Ağu
Should OTP be resent during the sign-up process if the user is already verified?
I'm building an authentication backend API that includes a resend OTP endpoint. The question is whether the API should check if the user is already verified before sending a new OTP. Specifically, if a user has already completed verification, should they be able to request a resend of the OTP? I'm looking for best practices or common approaches for handling this scenario.
