mohd 46af911a06 I proceeded with Phase 1 step 1 (phone-first auth + OTP hardening) and updated the plan context. Here’s the current state and the next steps. ...

What I implemented

Phone-first auth endpoints with OTP → JWT issuance.
views.py
urls.py
Phone normalization (KSA-focused, E.164 or Saudi mobile) and validation.
phone.py
serializers.py
OTP protections: rate limit, resend cooldown, attempt counting.
otp.py
models.py
Email is now optional to allow phone-only users.
models.py
0002_phone_auth_fields.py
Admin OTP visibility improved.
admin.py
Risks updated.
risks.md

2026-02-27 15:57:09 +03:00

..

__init__.py

Initial commit

2026-02-27 15:01:06 +03:00

asgi.py

Initial commit

2026-02-27 15:01:06 +03:00

settings.py

I proceeded with Phase 1 step 1 (phone-first auth + OTP hardening) and updated the plan context. Here’s the current state and the next steps.

2026-02-27 15:57:09 +03:00

urls.py

Initial commit

2026-02-27 15:01:06 +03:00

wsgi.py

Initial commit

2026-02-27 15:01:06 +03:00