feat: CXSPA-6689 one time password for login

[i333055]

Call OTP Creation API on login form: https://jira.tools.sap/browse/CXSPA-6672
Login with OTP: https://jira.tools.sap/browse/CXSPA-6689

Hi, @SAP/spartacus-codeowners could you help review and approve for change of projects/core module, thanks!

Hi @morganm58 , @developpeurweb could you help review the UI styles, thanks!

[i53577]

LGTM

[developpeurweb]

I'll approve but you still have very basic Accessibility issues that will come up in audits for sure, please create a ticket for each issue.

1. You have to complement all role="button" elements with full keyboard functionality as if they were real buttons. Both Enter and Spacebar should work for buttons. Right now only one of them works.
2. To comply with requirement ACC-278 you still need to provide context for the verification field using aria-describedby as shown previously in the password registration example. It could be something very simple, such as: "You can request a new code by activating the button below. A timer will start indicating the seconds left until you can request a new one".
3. When using keyboard-only navigation and focusing on the "Resend" button, the focus gets trapped and I can keep pressing Spacebar and reset the timer every time. Same thing when using a Screen Reader on read mode, I can still access the button while it's supposed to be disabled. This is an Accessibility issue, but might as well be a Security issue too. My suggestion is to disable the button on activation and remove focus from element so it's not reachable with keyboard and add aria-disabled so screen readers will ignore it until it becomes focusable again. Tagging @giancorderoortiz to follow up on Security concerns.