feat: add 2FA and change title

frontend-prep/src/api/api.ts

@@ -41,6 +41,8 @@ export interface AuthResponse {
     access_token?: string; // ✅ CRITICAL!
     token_type?: string;
     expires_in?: number;
+    requires_2fa?: boolean;
+    session_token?: string;
     user?: {
         id: number;
         username: string;
@@ -210,6 +212,15 @@ export const loginUser = async (
         const data = await safeJson(response);
         console.log("📋 [LOGIN] Réponse:", data);
 
+        // 2FA requis — retourner sans token
+        if (data.requires_2fa) {
+            return {
+                success: true,
+                requires_2fa: true,
+                session_token: data.session_token,
+            };
+        }
+
         // ✅ Vérifier access_token
         if (!data.access_token) {
             console.error("❌ [LOGIN] Pas de access_token");
@@ -1866,6 +1877,8 @@ export interface PublicSettings {
     crypto_payment_enabled: boolean;
     crypto_only: boolean;
     nowpayments_currencies: string[];
+    shop_name: string;
+    two_fa_enabled: boolean;
 }
 
 export const getPublicSettings = async (): Promise<PublicSettings> => {
@@ -1880,6 +1893,8 @@ export const getPublicSettings = async (): Promise<PublicSettings> => {
         crypto_payment_enabled: false,
         crypto_only: false,
         nowpayments_currencies: [],
+        shop_name: "Milieu-Nantais",
+        two_fa_enabled: false,
     };
     try {
         const response = await fetch(`${API_URL}/app-settings`);
@@ -1901,12 +1916,71 @@ export const getPublicSettings = async (): Promise<PublicSettings> => {
             nowpayments_currencies: Array.isArray(data.nowpayments_currencies)
                 ? data.nowpayments_currencies
                 : [],
+            shop_name: data.shop_name || "Milieu-Nantais",
+            two_fa_enabled: data.two_fa_enabled ?? false,
         };
     } catch {
         return defaults;
     }
 };
 
+export const verify2FA = async (
+    sessionToken: string,
+    code: string,
+): Promise<AuthResponse> => {
+    try {
+        const response = await fetch(`${API_URL}/auth/2fa/verify`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ session_token: sessionToken, code }),
+        });
+        const data = await safeJson(response);
+        if (!response.ok) {
+            return { success: false, message: data.error || "Code invalide" };
+        }
+        sessionStorage.setItem("token", data.access_token);
+        syncUsernameFromJWT();
+        return {
+            success: true,
+            access_token: data.access_token,
+            token_type: data.token_type,
+            expires_in: data.expires_in,
+            user: data.user,
+        };
+    } catch (error) {
+        return { success: false, message: error instanceof Error ? error.message : "Erreur" };
+    }
+};
+
+export const get2FAStatus = async (): Promise<{ two_fa_enabled: boolean; telegram_linked: boolean; admin_2fa_enabled: boolean }> => {
+    const token = sessionStorage.getItem("token");
+    try {
+        const response = await fetch(`${API_URL}/two-fa/status`, {
+            headers: { Authorization: `Bearer ${token}` },
+        });
+        if (!response.ok) return { two_fa_enabled: false, telegram_linked: false, admin_2fa_enabled: false };
+        return await safeJson(response);
+    } catch {
+        return { two_fa_enabled: false, telegram_linked: false, admin_2fa_enabled: false };
+    }
+};
+
+export const toggle2FA = async (enabled: boolean): Promise<{ success: boolean; error?: string }> => {
+    const token = sessionStorage.getItem("token");
+    try {
+        const response = await fetch(`${API_URL}/two-fa/toggle`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
+            body: JSON.stringify({ enabled }),
+        });
+        const data = await safeJson(response);
+        if (!response.ok) return { success: false, error: data.error };
+        return { success: true };
+    } catch {
+        return { success: false, error: "Erreur réseau" };
+    }
+};
+
 export interface CryptoPaymentStatus {
     command_id: number;
     client_order_number?: number;

frontend-prep/src/api/api_types.ts

@@ -58,6 +58,8 @@ export interface LoginResponse {
     token_type?: string;
     expires_in?: number;
     user?: UserResponse;
+    requires_2fa?: boolean;
+    session_token?: string;
 }
 
 /**