feat: OTP login implementation

[qamarq]

This pull request includes significant updates to both the backend and frontend of the project, primarily focusing on implementing OTP-based authentication and improving user data management. Additionally, there are updates to the project documentation and minor adjustments to existing functionalities.

Backend Changes:

• AuthController Enhancements:

  • Added OTP-based login functionality, including methods to generate and verify OTP codes (backend/app/controllers/auth_controller.ts). [1] [2] [3]
  • Updated user creation and login logic to include user avatars and verification status (backend/app/controllers/auth_controller.ts).

• User Model Updates:

  • Added new fields avatar, otpCode, otpExpire, and verified to the User model (backend/app/models/user.ts).
  • Updated the user table schema to include the new fields and removed unique constraint on usos_id (backend/database/migrations/1739705422939_prepare_users_table_to_otp.ts).

• Email Notifications:

  • Modified email sending logic to include a new sender name and subject for notification emails (backend/commands/notifications.ts).

• Route Adjustments:

  • Added new routes for OTP verification and login (backend/start/routes.ts).

Frontend Changes:

• OTP Authentication Integration:

  • Added actions to handle sending OTP to email, verifying OTP, and setting user data (frontend/src/actions/login.ts).
  • Updated logout action to use a relative URL for the API endpoint (frontend/src/actions/logout.ts).

• New Component:

  • Added a new promotional component for the ToPWr app (frontend/src/app/(homepage)/_components/topwr-ad.tsx).

• Dependency Updates:

  • Added input-otp package to handle OTP input fields (frontend/package.json, frontend/package-lock.json). [1] [2] [3]

Documentation Update:

• README Update:
  • Updated the welcome page image link in the README.md file (README.md).

These changes collectively enhance the security, functionality, and user experience of the project.

[Rei-x]

TRZEBA SPRAWDZIĆ CZY RATE LIMIT ZADZIAŁA Z TRAEFIKIEM

możesz poprawić te rzeczy, ale nie jest to wymagane, nice-to-have

nadal ta funkcja auth mi się nie podoba, ale to lepiej będzie kiedyś razem siąść i byśmy sobie pogadali jak to zrobić, nie jest najgorzej teraz ale da się lepiej