feat(auth): add username sign-in mode and recovery kits (#3215)

fluxer_api/src/api/report/ReportController.ts

@@ -1,5 +1,6 @@
 // SPDX-License-Identifier: AGPL-3.0-or-later
 
+import {RequireEmailAccountIdentity} from '@app/api/middleware/AccountIdentityMiddleware';
 import {DefaultUserOnly, LoginRequired} from '@app/api/middleware/AuthMiddleware';
 import {RateLimitMiddleware} from '@app/api/middleware/RateLimitMiddleware';
 import {OpenAPI} from '@app/api/middleware/ResponseTypeMiddleware';
@@ -95,6 +96,7 @@ export function ReportController(app: HonoApp) {
 	app.post(
 		'/reports/dsa/email/send',
 		RateLimitMiddleware(RateLimitConfigs.DSA_REPORT_EMAIL_SEND),
+		RequireEmailAccountIdentity,
 		OpenAPI({
 			operationId: 'send_dsa_report_email',
 			summary: 'Send DSA report email',
@@ -116,6 +118,7 @@ export function ReportController(app: HonoApp) {
 	app.post(
 		'/reports/dsa/email/verify',
 		RateLimitMiddleware(RateLimitConfigs.DSA_REPORT_EMAIL_VERIFY),
+		RequireEmailAccountIdentity,
 		OpenAPI({
 			operationId: 'verify_dsa_report_email',
 			summary: 'Verify DSA report email',