[5.x] OTP

[didoda]

This introduces OTP in BEM.

Configuration example:

'Otp' => [
     'send' => '/otp',
     'users_skip_otp' => [], // array of usernames to skip OTP authentication
],

The API endpoint Otp.send should send an email with the generated code and return a response containing the otp code and the expiration date:

'data' => [
    'otp_code' => '1234',
    'expires_at' => '2026-03-24 10:05:00',
]

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.80%. Comparing base (f5ae391) to head (f33e880).
⚠️ Report is 18 commits behind head on 5.x.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff            @@
##                5.x    #1386   +/-   ##
=========================================
  Coverage     99.80%   99.80%           
- Complexity     1455     1475   +20     
=========================================
  Files           101      102    +1     
  Lines          5677     5736   +59     
=========================================
+ Hits           5666     5725   +59     
  Misses           11       11           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.