March 15, 2026Improvement

Mobile app support: OTP auth + Bearer tokens

OTP-based sign-in and Bearer token auth across all API routes, ready for mobile clients.

We added Resend-powered OTP authentication and made every API route accept a Bearer token alongside cookie sessions. This is the foundation for our mobile app — the same backend now serves both web and mobile clients cleanly.