Remove demo mode from signup OTP verification flow

backend/app/api/auth.py

@@ -27,10 +27,9 @@ _otp_store: dict[str, dict] = {}
 def send_otp(payload: dict, db: Session = Depends(get_db)):
     """
     Generate and send an OTP for email verification during signup.
-    If SMTP is configured, sends a real email.
-    If not, returns OTP in response (demo mode).
+    Sends a 6-digit code to the provided email address.
     """
-    from app.services.email_service import send_otp_email, is_email_configured
+    from app.services.email_service import send_otp_email
 
     email = payload.get("email", "").strip().lower()
     username = payload.get("username", "")
@@ -59,16 +58,10 @@ def send_otp(payload: dict, db: Session = Depends(get_db)):
         "password": password,
     }
 
-    # Try to send real email
-    email_sent = send_otp_email(email, otp_code)
+    # Send verification email
+    send_otp_email(email, otp_code)
 
-    response = {"message": f"Verification code sent to {email}"}
-
-    # Only show OTP preview if email sending is not configured (demo mode)
-    if not email_sent:
-        response["otp_preview"] = otp_code
-
-    return response
+    return {"message": f"Verification code sent to {email}"}
 
 
 @router.post("/verify-otp")

backend/app/services/email_service.py

@@ -3,8 +3,6 @@ Email service for sending OTP verification codes and password reset links.
 
 Uses Resend HTTP API (works from any environment, no SMTP port restrictions).
 Configure via environment variable: RESEND_API_KEY
-
-Falls back to demo mode (returns OTP on screen) if not configured.
 """
 
 import os

frontend/src/components/auth/AuthLayout.css

@@ -237,15 +237,6 @@
     border-radius: var(--radius-sm);
 }
 
-.dw-auth-form__otp-preview {
-    font-size: var(--text-sm);
-    color: var(--color-accent-text);
-    background: var(--color-accent-soft);
-    padding: var(--space-2) var(--space-3);
-    border-radius: var(--radius-sm);
-    text-align: center;
-}
-
 .dw-auth-form__resend {
     background: none;
     border: none;

frontend/src/pages/auth/Signup.jsx

@@ -28,7 +28,6 @@ export default function Signup() {
     const [confirmPassword, setConfirmPassword] = useState("");
     const [showPassword, setShowPassword] = useState(false);
     const [otpCode, setOtpCode] = useState("");
-    const [otpPreview, setOtpPreview] = useState("");
     const [error, setError] = useState(null);
     const [loading, setLoading] = useState(false);
 
@@ -57,10 +56,6 @@ export default function Signup() {
                 return;
             }
 
-            // In demo mode, OTP is returned in response
-            if (result?.otp_preview) {
-                setOtpPreview(result.otp_preview);
-            }
             setStep("otp");
         } catch {
             setError("Couldn't reach the server. Please try again.");
@@ -117,11 +112,6 @@ export default function Signup() {
                 }
             >
                 <form onSubmit={handleVerifyOtp} className="dw-auth-form">
-                    {otpPreview && (
-                        <div className="dw-auth-form__otp-preview">
-                            Demo mode — your code is: <strong>{otpPreview}</strong>
-                        </div>
-                    )}
                     <Input
                         label="Verification code"
                         type="text"