Remove django-allauth-2fa, dj-rest-auth and django-user-sessions

[matmair]

This PR remove django-allauth-2fa and replaces it with the inline functions of django-allauth. This reduces the dependency footprint and eliminates a bunch of custom creations.
It also adapts the schema generation process to include all allauth endpoints (they do not use DRF so normal generation is not working).

Update: Most of the planned things we would be interested in are now implemented and the scope shifted a bit - it makes sense to just ripp all auth extensions out and use only allauths built-in things. We have a lot of grown auth-adjacent code that can probably be removed/rewritten.

Related Issues

• Closes Remove django-allauth-2fa #6281
• Closes [UI] Multifactor token configuration #8708
• Closes New Interface - Unable to Login with Google SSO #8949

TODO

• refactor authentication forms && detection of enabled features (see 8912)
• implement custom link target lookup for email from django-allauth
• show user ID in MFA flow
• implement email verification flow
• re-implement registration flow
• re-implement password reset flow
• re-implement password change
• keep auth context somewhere for the local session to refer back to
• move now removed system status info into main status (registration, mfa, sso available)
• switch back to browser flow for auth APIs
• rename all new auth URLs to fix to the current schema
• include schema for auth with central API
• write changelog

Coverage

This relies on several upstream PRs:

• https://codeberg.org/allauth/django-allauth/pulls/4236 (custom frontend URLs)
• https://codeberg.org/allauth/django-allauth/pulls/4235 (allowing email registration even if MFA is enabled)

[netlify]

✅ Deploy Preview for inventree-web-pui-preview ready!

Name	Link
🔨 Latest commit	dfaaa80
🔍 Latest deploy log	https://app.netlify.com/sites/inventree-web-pui-preview/deploys/67aaf53369848f00087496f8
😎 Deploy Preview	https://deploy-preview-6293--inventree-web-pui-preview.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 94 (🔴 down 2 from production) Accessibility: 89 (no change from production) Best Practices: 92 (🔴 down 8 from production) SEO: 78 (no change from production) PWA: - View the detailed breakdown and full score reports

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[matmair]

@SchrodingersGat @wolflu05 This is ready for review and merge.

There are many things I would like to improve in the future, but this PR would never ship if I made it feature complete to my liking. Here is a list of things that come to mind. I would wait for users to request and submit/fund these before doing them:

• Adding webauthn as a factor
• Dynamically showing and controlling if username or email is required
• Improving token issuance UX
• Adding sessions managment
• Moving all the Auth stuff into a separate Layout component
• e2e testing of SSO (that should be possible from a data flow view now)
• better management of email verifications
• adding better permission management into Admin Center
• adding better SSO provider setup into Admin Center
• adding a unified Authn/Authz setup and settings experience to Admin Center