maaz519 a1d2c6e6c2 feat: member phone login — POST /public/auth/member-login + /my/login page
Returning members can now sign in with just their phone number.
The bot DMs them a 6-digit OTP; on verify a 30-day session cookie is set.
First-time users are directed to their invite link from the login page.

- Make OtpChallenge.groupId optional (migration) for re-login challenges
- Add memberLogin / memberVerify service methods
- Add POST /public/auth/member-login and /member-verify controller endpoints
- Add /api/my/login BFF route (sets tower_member_token cookie)
- Add /my/login page (phone → OTP two-step form)
- /my/* now redirects to /my/login instead of /onboard on no session

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-20 16:37:19 +05:30
2026-06-09 02:02:40 +05:30
2026-06-09 15:33:21 +05:30
2026-06-09 02:02:40 +05:30
2026-06-09 15:33:21 +05:30
2026-06-09 15:33:21 +05:30
S
Description
No description provided
1.4 MiB
Languages
TypeScript 98.7%
Dockerfile 0.5%
CSS 0.3%
JavaScript 0.3%
PLpgSQL 0.1%