CS Network

User Story 1: Multi-Pathway Authentication & WhatsApp OTP Verification
As a new member trying to register on Connect Souq, I want to authenticate either via my social accounts (Google/Apple) first or my WhatsApp number first, and verify my identity through a secure WhatsApp OTP, So that my account is securely linked and verified on the platform.

Frontend Requirements:
Dual-Flow Entry Screen: Support both Social-First Flow (Google/Apple OAuth first, then WhatsApp link) and WhatsApp-First Flow (WhatsApp verification first, then Social link).
Phone Validation UI: A custom phone number input component (

CountryPhoneInput.jsx
) with interactive search, flag indicators, and country code prefix validation.
OTP Component: A multi-input OTP verification block (

OTPVerification.jsx
) featuring auto-focus, backspace handling, countdown timers, and "Resend OTP" controls.
Backend Requirements:
OAuth Integrations: Validate external id-tokens from Google & Apple authentication services.
WhatsApp OTP Service: Integrate with WhatsApp Business API to send dynamic 6-digit numeric OTPs.
Verification Cache: Implement transient redis/database cache storing OTP hashes mapped to phone numbers with a 5-minute TTL.
Bypass Prevention: Expose secure token exchange endpoints to grant session cookies/tokens only upon successful OTP match.