x
title: After
Client -> Server: `anonymous user` Login (user+password)
Server -> Client : token `anonymous user`
note:
**at this point in time** the _session_ is still an Anonymous session, but session checked for authentication.
Client -> Server: `anonymous user` token + MFA code
Server -> Client : Navigate to page `logged in user`
After
Client
Server
at this point in time the session is still an Anonymous session, but session checked for authentication.
Client
Server
Client
Server