Identité production-ready,
en trois lignes.

'use server'
import { aura } from '@/lib/aurabase'
export async function signIn(formData: FormData) {
  const email = formData.get('email') as string
  const password = formData.get('password') as string
  const { data, error } = await aura.auth.signInWithPassword({
    email, password,
    mfa: 'required',  // impose TOTP si activé
  })
  if (error) return { error: error.message }
  redirect('/dashboard')
}