Replace login with OTK auth, force light mode, hide theme toggle

Shipped

April 17, 2026 at 6:42 PM UTC

Author

Kamo

Commit

00aaaec

Remove direct login — authentication now handled exclusively via one-time keys from kamo-internal. New /api/auth/otk route validates OTK against shared Redis, signs in as the "kamo" user. New /auth/otk client page processes OTK and stores auth token. Force light mode via CSS color-scheme, Zustand store override, and LightModeEnforcer component. Remove theme toggle from UserButton. Add REDIS_URL, ALLOWED_FRAME_URLS, and DISABLE_LOGIN to k8s deployment.