fix

app.py

@@ -310,34 +310,19 @@ import os
 from email.message import EmailMessage
 
 def send_otp(email):
-    otp = str(random.randint(100000, 999999))  # generate OTP
+    email = sanitize_input(email)
+    otp = str(random.randint(100000, 999999))
+    otp_data = otp_store.get(email, {})
+    
+    # Preserve pw and un if already stored during signup
     otp_store[email] = {
         "otp": otp,
-        "expires": datetime.now() + timedelta(minutes=10)
-    }
-
-    api_key = os.getenv("RESEND_API_KEY")
-    sender = os.getenv("RESEND_SENDER", "onboarding@resend.dev")
-
-    headers = {
-        "Authorization": f"Bearer {api_key}",
-        "Content-Type": "application/json"
-    }
-
-    data = {
-        "from": sender,
-        "to": [email],
-        "subject": "Your OTP for EduMate",
-        "text": f"Your OTP is: {otp}"
+        "expires": datetime.now() + timedelta(minutes=10),
+        "pw": otp_data.get("pw"),
+        "un": otp_data.get("un")
     }
 
-    try:
-        response = requests.post("https://api.resend.com/emails", headers=headers, json=data)
-        response.raise_for_status()
-        return True
-    except Exception as e:
-        print(f"❌ Resend Error: {e}")
-        return False
+    ...
 
 import json  # add at top if not already
 
@@ -846,26 +831,21 @@ with gr.Blocks(theme=gr.themes.Soft(), css=custom_css) as app:
     btn_signup.click(on_signup, [email, pwd, username_box, agree_checkbox], status)
 
     def on_verify(em, otp_inp):
-        em = sanitize_input(em)
-        otp_inp = sanitize_input(otp_inp)
-        otp_data = otp_store.get(em)
-
+    
         if (
             otp_data and
             otp_inp == otp_data.get("otp") and
             datetime.now() < otp_data.get("expires")
         ):
-            # OTP is valid — continue signup
             pw = otp_data.get("pw")
             un = otp_data.get("un")
             if pw and un:
                 saved = save_user(em, pw, un)
                 if saved:
                     del otp_store[em]
+                    user_email.update(value=em)  # 🔥 this is critical!
                     return "✅ Signup complete—please login"
-            return "❌ User already exists or DB error"
 
-        return "❌ Wrong OTP or expired"