293:    public function verifyOtp(Request $request) {
315:    public function resendOtp(Request $request) {
---
    public function verifyOtp(Request $request) {
        $request->validate([
            'token' => 'required|string',
            'otp_code' => 'required|string',
        ]);

        $user = User::where('verification_token', $request->token)->first();

        if (!$user->otp_code || $user->otp_code !== $request->otp_code) {
            return response()->json(['message' => 'Invalid OTP'], 400);
        }

        $otpExpiry = 10;
        if ($user->otp_sent_at->addMinutes($otpExpiry)->isPast()) {
            return response()->json(['message' => 'OTP expired. Please request a new one.'], 400);
        }

        $user->is_verified = true;
        $user->save();

        return response()->json(['message' => 'Email verified successfully']);
    }
PROC_DONE