Secure Student-Only Auth (ID Card Scan + OTP)

✅ Auth Flow

1. ID Card Scan

   • OCR extract student ID info
   • Match with backend student records

2. OTP Verification

   • Send OTP to registered phone/email
   • Verify OTP to authenticate

3. Secure Session

   • Issue JWT or session token
   • Store token securely on device

---

Recommended Libraries (React Native)

Task	Library
OCR / ID Scan	react-native-ml-kit
OTP Auth	@react-native-firebase/auth
Secure Token Store	react-native-keychain / SecureStore
HTTP Requests	axios (with HTTPS)

---

Security Tips

• Use on-device OCR to avoid PII leaks
• OTP: 5 min expiry, rate limit, secure backend check
• Store tokens in Keychain, not AsyncStorage
• Always use HTTPS
• Validate student ID → OTP on server-side