feat(auth,privacy,web): step-by-step login, privacy settings persistence, TOTP QR, and API docs

app/users/service.py

@@ -41,6 +41,9 @@ async def update_user_profile(
     bio: str | None = None,
     avatar_url: str | None = None,
     allow_private_messages: bool | None = None,
+    privacy_last_seen: str | None = None,
+    privacy_avatar: str | None = None,
+    privacy_group_invites: str | None = None,
 ) -> User:
     if name is not None:
         user.name = name
@@ -52,6 +55,12 @@ async def update_user_profile(
         user.avatar_url = avatar_url
     if allow_private_messages is not None:
         user.allow_private_messages = allow_private_messages
+    if privacy_last_seen is not None:
+        user.privacy_last_seen = privacy_last_seen
+    if privacy_avatar is not None:
+        user.privacy_avatar = privacy_avatar
+    if privacy_group_invites is not None:
+        user.privacy_group_invites = privacy_group_invites
     await db.commit()
     await db.refresh(user)
     return user