refactor: migrate authentication from Supabase to Better Auth and update project configuration

apps/backend/src/modules/password-reset/services/password-reset.service.ts

@@ -1,7 +1,7 @@
 import { createHash, randomInt } from 'node:crypto';
+import { auth } from '@/lib/auth';
 import { sendMail } from '@/lib/mailer';
 import { db } from '@/lib/prisma';
-import { getSupabaseAdminClient } from '@/lib/supabase-admin';
 import type {
   PasswordResetResendInput,
   PasswordResetStartInput,
@@ -189,34 +189,17 @@ async function sendPasswordChangedEmail(
   });
 }
 
-async function findSupabaseUserByEmail(email: string): Promise<{ id: string } | null> {
-  let page = 1;
-  const perPage = 100;
+async function findBetterAuthUserByEmail(email: string): Promise<{ id: string } | null> {
+  const user = await db.user.findUnique({
+    where: { email },
+    select: { id: true },
+  });
 
-  while (page <= 10) {
-    const { data, error } = await getSupabaseAdminClient().auth.admin.listUsers({
-      page,
-      perPage,
-    });
-
-    if (error) {
-      throw new Error(`No se pudo consultar usuarios en Supabase: ${error.message}`);
-    }
-
-    const found = data.users.find((user) => user.email?.toLowerCase() === email.toLowerCase());
-
-    if (found) {
-      return { id: found.id };
-    }
-
-    if (data.users.length < perPage) {
-      return null;
-    }
-
-    page += 1;
+  if (!user) {
+    return null;
   }
 
-  return null;
+  return { id: user.id };
 }
 
 export async function startPasswordReset(
@@ -224,7 +207,7 @@ export async function startPasswordReset(
 ): Promise<PasswordResetStartResult> {
   const email = normalizeEmail(input.email);
 
-  const existingUser = await findSupabaseUserByEmail(email);
+  const existingUser = await findBetterAuthUserByEmail(email);
   if (!existingUser) {
     return {
       message: 'Si el email existe, recibirás un código de verificación.',
@@ -369,13 +352,30 @@ export async function verifyOtpAndResetPassword(
     throw new PasswordResetError('Código incorrecto.', 400);
   }
 
-  const existingUser = await findSupabaseUserByEmail(request.email);
+  const existingUser = await findBetterAuthUserByEmail(request.email);
   if (!existingUser) {
     throw new PasswordResetError('Usuario no encontrado.', 404);
   }
 
-  await getSupabaseAdminClient().auth.admin.updateUserById(existingUser.id, {
-    password: newPassword,
+  const resetToken = uuidv7();
+  const identifier = `reset-password:${resetToken}`;
+  const expiresAt = nowPlusMinutes(OTP_TTL_MINUTES);
+
+  await db.verification.create({
+    data: {
+      id: uuidv7(),
+      identifier,
+      value: existingUser.id,
+      expiresAt,
+    },
+  });
+
+  await auth.api.resetPassword({
+    asResponse: false,
+    body: {
+      token: resetToken,
+      newPassword,
+    },
   });
 
   await db.passwordResetRequest.update({