feat: Implement MFA authentication, add ride statistics model, and update various services, APIs, and tests across the application.

backend/apps/api/v1/auth/urls.py

@@ -5,29 +5,30 @@ This module contains URL patterns for core authentication functionality only.
 User profiles and top lists are handled by the dedicated accounts app.
 """
 
-from django.urls import path, include
+from django.urls import include, path
+from rest_framework_simplejwt.views import TokenRefreshView
+
+from . import mfa as mfa_views
 from .views import (
-    # Main auth views
-    LoginAPIView,
-    SignupAPIView,
-    LogoutAPIView,
-    CurrentUserAPIView,
-    PasswordResetAPIView,
-    PasswordChangeAPIView,
-    SocialProvidersAPIView,
     AuthStatusAPIView,
-    # Email verification views
-    EmailVerificationAPIView,
-    ResendVerificationAPIView,
     # Social provider management views
     AvailableProvidersAPIView,
     ConnectedProvidersAPIView,
     ConnectProviderAPIView,
+    CurrentUserAPIView,
     DisconnectProviderAPIView,
+    # Email verification views
+    EmailVerificationAPIView,
+    # Main auth views
+    LoginAPIView,
+    LogoutAPIView,
+    PasswordChangeAPIView,
+    PasswordResetAPIView,
+    ResendVerificationAPIView,
+    SignupAPIView,
     SocialAuthStatusAPIView,
+    SocialProvidersAPIView,
 )
-from rest_framework_simplejwt.views import TokenRefreshView
-
 
 urlpatterns = [
     # Core authentication endpoints
@@ -98,6 +99,14 @@ urlpatterns = [
         ResendVerificationAPIView.as_view(),
         name="auth-resend-verification",
     ),
+
+    # MFA (Multi-Factor Authentication) endpoints
+    path("mfa/status/", mfa_views.get_mfa_status, name="auth-mfa-status"),
+    path("mfa/totp/setup/", mfa_views.setup_totp, name="auth-mfa-totp-setup"),
+    path("mfa/totp/activate/", mfa_views.activate_totp, name="auth-mfa-totp-activate"),
+    path("mfa/totp/deactivate/", mfa_views.deactivate_totp, name="auth-mfa-totp-deactivate"),
+    path("mfa/totp/verify/", mfa_views.verify_totp, name="auth-mfa-totp-verify"),
+    path("mfa/recovery-codes/regenerate/", mfa_views.regenerate_recovery_codes, name="auth-mfa-recovery-regenerate"),
 ]
 
 # Note: User profiles and top lists functionality is now handled by the accounts app