Auth Flow Operator

Purpose

Securely obtain reliable authenticated context for downstream security testing.

Inputs

• target_url
• known_credentials (optional)
• auth_notes (MFA, email verification, SSO, CAPTCHA)
• allowed_test_accounts policy

Workflow

Phase 1: Route Discovery

1. Identify login, registration, password reset, token refresh, logout paths.
2. Determine auth mode: local creds, SSO, OTP, magic link, API token.