more fix and update

apps/frontend/components/id/auth-provider.tsx

@@ -39,7 +39,10 @@ interface AuthContextValue {
   verifyLoginOtp: (recipient: string, code: string) => Promise<PasswordlessAuthResponse>;
   loginWithPassword: (login: string, password: string) => Promise<AuthTokens>;
   loginWithLdap: (username: string, password: string) => Promise<AuthTokens>;
+  beginTotpLogin: (recipient: string) => Promise<string>;
+  verifyTotpLogin: (totpChallengeToken: string, code: string) => Promise<AuthTokens>;
   completePin: (sessionId: string, pin: string) => Promise<void>;
+  applyLoginAuth: (auth: AuthTokens) => AuthTokens;
   register: (data: { displayName: string; login: string; password: string }) => Promise<void>;
   refreshProfile: () => Promise<void>;
   logout: () => void;
@@ -381,6 +384,50 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
     [saveSession]
   );
 
+  const beginTotpLogin = React.useCallback(async (recipient: string) => {
+    const response = await apiFetch<{ totpChallengeToken: string }>('/auth/totp/begin', {
+      method: 'POST',
+      body: JSON.stringify({
+        recipient,
+        fingerprint: getDeviceFingerprint(),
+        deviceName: navigator.userAgent.includes('Windows') ? 'Windows Browser' : 'Browser',
+        deviceType: 'WEB'
+      })
+    });
+    return response.totpChallengeToken;
+  }, []);
+
+  const verifyTotpLogin = React.useCallback(
+    async (totpChallengeToken: string, code: string) => {
+      const auth = await apiFetch<AuthTokens>('/auth/totp/verify', {
+        method: 'POST',
+        body: JSON.stringify({ totpChallengeToken, code })
+      });
+      if (auth.pinVerified) {
+        saveSession(auth);
+      } else {
+        persistPartialAuth(auth);
+        setHasStoredSession(true);
+      }
+      return auth;
+    },
+    [saveSession]
+  );
+
+  const applyLoginAuth = React.useCallback(
+    (auth: AuthTokens) => {
+      if (auth.pinVerified) {
+        saveSession(auth);
+      } else {
+        persistPartialAuth(auth);
+        setHasStoredSession(true);
+        activatePinLock(auth.sessionId);
+      }
+      return auth;
+    },
+    [activatePinLock, saveSession]
+  );
+
   const completePin = React.useCallback(
     async (sessionId: string, pin: string) => {
       const response = await apiFetch<PinVerificationResponse>('/auth/pin/verify', {
@@ -452,7 +499,10 @@ export function AuthProvider({ children }: { children: React.ReactNode }) {
         verifyLoginOtp,
         loginWithPassword,
         loginWithLdap,
+        beginTotpLogin,
+        verifyTotpLogin,
         completePin,
+        applyLoginAuth,
         register,
         refreshProfile,
         logout