CareerCup

Login:
1. valid username and password
2. invalid username and valid password
3. valid username and invalid password
4. try multiple times with invalid username/password
5. try with empty username and password
6. try to pass the sql query in the username and passwrd field
7. provide invalid/valid credentials and click the signup link.
8. multiple user login at the same time.
9. before clicking the login shutdown the backend/network/registration service and click the signup.
10. check the login feature in different mobile brands and versions.


Sign-up:
1. click the signup link. fill the valid details and submit it.
2. click the signup link. fill the valid details of already existing users and check it.
3. click he signup link. dont fill the mandatory details and submit.
4. click the signup link. fill only the mandatory details and check it.
5. click the signup link. fill invalid data for the different fields and check it.
6. try to register multiple users with multiple req.
7. register the user and check the login for the same user.
8. register the user successfully, delete the user at backend and try to login with the credentials.
9. before clicking the registration details, shutdown the backend/network/registration service and click the signup.
10. check the signup feature in diffferent mobile brands and versions.
11. try to pass the sql query in the registration details.

For Login screen:
--------------------------------
1. If correct username and password are provided.
2. If invalid(not registered) username is provided.
3. If username is correct, but password is not correct.
4. If username is correct, but password is not correct for x number of consecutive attempts,(we may want to lock the account in that case)

For Signup Screen:
----------------------------------
1. If all fields are valid.
2. If some of the fields are invalid such as weak password, invalid mobile number etc...
3. If already registered username/mobile number/email id is provided.

Extra ones can be :

try injecting username and password in the url, you can check in developer tool if it has get call and then test using username and password in the query itself