Add Phone Login and Bot Contact Handler

src/api/routes.js

@@ -460,5 +460,74 @@ router.post('/auth/token', async (req, res) => {
     }
 });
 
+// --- PHONE LOGIN ENDPOINTS ---
+const OTP_STORE = new Map(); // Store OTPs: "998901234567" -> "1234"
+
+router.post('/auth/send-code', async (req, res) => {
+    try {
+        const { phone } = req.body;
+        if (!phone) return res.status(400).json({ success: false, message: "Phone required" });
+
+        // Clean phone
+        const cleanPhone = phone.replace('+', '');
+
+        // Find user by phone
+        const user = await User.findOne({ phone: cleanPhone });
+
+        if (!user) {
+            return res.json({
+                success: false,
+                status: 'not_found',
+                message: "Ushbu raqam botda ro'yxatdan o'tmagan. Iltimos, botga kiring va raqamingizni yuboring."
+            });
+        }
+
+        // Generate Code
+        const code = Math.floor(1000 + Math.random() * 9000).toString();
+        OTP_STORE.set(cleanPhone, code);
+
+        // Send via Bot
+        try {
+            await req.bot.telegram.sendMessage(user.id, `🔐 <b>Tasdiqlash kodi:</b> <code>${code}</code>\n\nIlovaga kiriting.`, { parse_mode: 'HTML' });
+            res.json({ success: true, status: 'sent', message: "Kod yuborildi" });
+        } catch (botError) {
+            console.error("Bot Send Error:", botError);
+            res.json({ success: false, message: "Botga yuborib bo'lmadi. Botni bloklamaganmisiz?" });
+        }
+
+    } catch (e) {
+        console.error("Send Code Error:", e);
+        res.status(500).json({ success: false, message: "Server Error" });
+    }
+});
+
+router.post('/auth/verify-code', async (req, res) => {
+    try {
+        const { phone, code } = req.body;
+        const cleanPhone = phone.replace('+', '');
+
+        if (OTP_STORE.get(cleanPhone) === code) {
+            OTP_STORE.delete(cleanPhone); // Consume code
+
+            const user = await User.findOne({ phone: cleanPhone });
+            if (!user) return res.status(404).json({ success: false, message: "User not found" });
+
+            res.json({
+                success: true,
+                status: 'approved',
+                user: {
+                    id: user.id.toString(),
+                    name: user.first_name,
+                    username: user.username
+                }
+            });
+        } else {
+            res.json({ success: false, message: "Kod noto'g'ri" });
+        }
+    } catch (e) {
+        res.status(500).json({ success: false, message: "Server Error" });
+    }
+});
+
 module.exports = router;
 

src/main.js

@@ -18,6 +18,12 @@ const apiRoutes = require('./api/routes');
 const app = express();
 app.use(cors());
 app.use(bodyParser.json());
+// Inject Bot into Request
+const bot = require('../main');
+app.use((req, res, next) => {
+    req.bot = bot;
+    next();
+});
 app.use('/api', apiRoutes);
 app.use('/public', express.static(path.join(__dirname, '../public'))); // Serve Static Files (APK, etc.)
 
@@ -97,7 +103,39 @@ bot.command('admin', (ctx) => {
 
 // Admin Callbacks
 bot.action('admin_dashboard', (ctx) => adminController.showDashboard(ctx));
-bot.action('admin_api', (ctx) => adminController.showApiMenu(ctx)); // NEW
+// Admin Callbacks
+bot.action('admin_dashboard', (ctx) => adminController.showDashboard(ctx));
+bot.action('admin_api', (ctx) => adminController.showApiMenu(ctx));
+
+// --- CONTACT HANDLER (For Phone Login) ---
+bot.on('contact', async (ctx) => {
+    try {
+        const contact = ctx.message.contact;
+        // Check if contact belongs to the user
+        if (contact.user_id !== ctx.from.id) {
+            return ctx.reply("🔒 Iltimos, o'zingizning raqamingizni yuboring (tugmani bosing).");
+        }
+
+        let user = await User.findOne({ id: ctx.from.id });
+        if (!user) {
+            user = new User({
+                id: ctx.from.id,
+                first_name: ctx.from.first_name,
+                username: ctx.from.username,
+                phone: contact.phone_number.replace('+', '')
+            });
+            await user.save();
+        } else {
+            user.phone = contact.phone_number.replace('+', '');
+            await user.save();
+        }
+
+        ctx.reply(`✅ <b>Raqam tasdiqlandi!</b>\n\nEndi ilovaga kirib, <b>${user.phone}</b> raqamini kiritsangiz, men sizga kod yuboraman.`, { parse_mode: 'HTML' });
+    } catch (e) {
+        console.error("Contact Error:", e);
+        ctx.reply("Xatolik yuz berdi.");
+    }
+});
 bot.action('admin_api_generate', (ctx) => adminController.generateApiKey(ctx)); // NEW
 
 bot.action('admin_users', (ctx) => adminController.showUsers(ctx));