maaz519
a1d2c6e6c2
Returning members can now sign in with just their phone number. The bot DMs them a 6-digit OTP; on verify a 30-day session cookie is set. First-time users are directed to their invite link from the login page. - Make OtpChallenge.groupId optional (migration) for re-login challenges - Add memberLogin / memberVerify service methods - Add POST /public/auth/member-login and /member-verify controller endpoints - Add /api/my/login BFF route (sets tower_member_token cookie) - Add /my/login page (phone → OTP two-step form) - /my/* now redirects to /my/login instead of /onboard on no session Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
4 lines
203 B
SQL
4 lines
203 B
SQL
-- Make groupId optional on OtpChallenge so member re-login challenges
|
|
-- (which have no group context) can be created without a groupId.
|
|
ALTER TABLE "OtpChallenge" ALTER COLUMN "groupId" DROP NOT NULL;
|