feat: Add /student and /teacher portals with Alpine.js, WhatsApp OTP, and device fingerprinting

backend/public/index.php

@@ -19,7 +19,22 @@ $router = new Router();
 // 3. Define Global Middleware
 $router->use(\App\Middlewares\SecurityMiddleware::class);
 
-// 4. Define API Routes
+// 4. Define Web and API Routes
+
+// Root Redirect to Student Portal
+$router->get('/', function ($request, $response) {
+    header('Location: /student');
+    exit;
+});
+
+// Web Portals (HTML + Alpine.js)
+$router->get('/student', function ($request, $response) {
+    $response->html(\App\Views\StudentPortal::render());
+});
+
+$router->get('/teacher', function ($request, $response) {
+    $response->html(\App\Views\TeacherPortal::render());
+});
 
 // Health Check
 $router->get('/api/health', function ($request, $response) {
@@ -31,12 +46,17 @@ $router->get('/api/health', function ($request, $response) {
     ]);
 });
 
-// Authentication Routes (Rate-limited: 5 attempts per 60 seconds per IP)
+// OTP Authentication Routes (WhatsApp via Nabeh Gateway + Device Fingerprinting)
+$router->post('/api/auth/otp/request', [\App\Controllers\AuthController::class, 'requestOtp'], [\App\Middlewares\RateLimitMiddleware::class]);
+$router->post('/api/auth/otp/verify',  [\App\Controllers\AuthController::class, 'verifyOtp'],  [\App\Middlewares\RateLimitMiddleware::class]);
+$router->post('/api/auth/logout',      [\App\Controllers\AuthController::class, 'logout'],     [\App\Middlewares\AuthMiddleware::class]);
+$router->get('/api/auth/me',           [\App\Controllers\AuthController::class, 'me'],         [\App\Middlewares\AuthMiddleware::class]);
+
+// Legacy / Direct Auth
 $router->post('/api/auth/register', [\App\Controllers\AuthController::class, 'register'], [\App\Middlewares\RateLimitMiddleware::class]);
 $router->post('/api/auth/login',    [\App\Controllers\AuthController::class, 'login'],    [\App\Middlewares\RateLimitMiddleware::class]);
-$router->get('/api/auth/me',        [\App\Controllers\AuthController::class, 'me'],       [\App\Middlewares\AuthMiddleware::class]);
 
-// Teacher Routes
+// Teacher Studio Routes
 $router->post('/api/teacher/courses', [\App\Controllers\TeacherController::class, 'addCourse'], [\App\Middlewares\AuthMiddleware::class]);
 $router->post('/api/teacher/lessons', [\App\Controllers\TeacherController::class, 'addLesson'], [\App\Middlewares\AuthMiddleware::class]);