UseCase03 - Login

Initiating actor: Guest

Description

A guest can browse the system in read-only mode. When the guest attempts to perform a restricted action, the system requires authentication. The guest logs in by providing a username and password. The system verifies the credentials and, if valid, starts an authenticated session. After login, the user can perform actions allowed by their role. If authentication fails, the user remains in read-only mode.

Scenario

1. Guest goes to the login page.
2. Guest submits credentials.

   SELECT
     user_id,
     username,
     email,
     name,
     surname
   FROM users
   WHERE username = 'client.mila'
     AND password_hash = '$2b$12$demoHashedPassword';