# Customer Mobile OTP Login

Customer login now uses a 10-digit mobile number and 6-digit OTP. OTPs are valid for 5 minutes and allow up to 5 verification attempts.

## Localhost testing
If WhatsApp Cloud API OTP template settings are empty, Laravel writes the generated OTP to `storage/logs/laravel.log`.

## WhatsApp OTP delivery
Set these values in `.env` after creating/approving the OTP template in Meta WhatsApp Manager:

```env
WHATSAPP_ACCESS_TOKEN=
WHATSAPP_PHONE_NUMBER_ID=
WHATSAPP_API_VERSION=v23.0
WHATSAPP_OTP_TEMPLATE_NAME=your_approved_otp_template
WHATSAPP_OTP_TEMPLATE_LANGUAGE=en_US
```

The template must accept one body text parameter containing the OTP.

## Product list PDF
The public Product List PDF was rebuilt as a valid PDF and is served inline so Chrome can open it. The old invalid xref output was the reason for the “Failed to load PDF document” error.