Implement rate limiting and enhance authentication flow

- Added rate limiting configuration for authentication endpoints, allowing customizable request limits via environment variables.
- Updated authentication flow to utilize HttpRequest for cookie management, ensuring secure handling of refresh tokens.
- Introduced a new endpoint to retrieve user subscription details.
- Enhanced the handling of Telegram bot token validation to prevent errors with empty tokens.
- Updated the application to serialize enums as strings for better documentation and compatibility with TypeScript.
- Improved test coverage for new features and adjustments in command handlers.

frontend/src/features/configs/api.ts

@@ -0,0 +1,46 @@
+import { apiRequest } from '@/shared/api/client'
+import type {
+  AvailableInboundDto,
+  ConfigLinkDto,
+  GetMyConfigsResult,
+  MySubscriptionDto,
+  VpnConfigDto,
+} from '@/shared/api/types'
+
+export function listAvailableInbounds() {
+  return apiRequest<AvailableInboundDto[]>('/inbounds/available')
+}
+
+export function getMyConfigs() {
+  return apiRequest<GetMyConfigsResult>('/configs')
+}
+
+export function createConfig(inboundId: string, label: string | undefined, deviceLimit: number | undefined) {
+  return apiRequest<VpnConfigDto>('/configs', {
+    method: 'POST',
+    body: { inboundId, label: label ?? null, deviceLimit: deviceLimit ?? null },
+  })
+}
+
+export function editConfig(id: string, label: string | undefined, deviceLimit: number | undefined) {
+  return apiRequest<VpnConfigDto>(`/configs/${id}`, {
+    method: 'PATCH',
+    body: { label: label ?? null, deviceLimit: deviceLimit ?? null },
+  })
+}
+
+export function rotateConfig(id: string) {
+  return apiRequest<VpnConfigDto>(`/configs/${id}/rotate`, { method: 'POST' })
+}
+
+export function revokeConfig(id: string) {
+  return apiRequest<void>(`/configs/${id}`, { method: 'DELETE' })
+}
+
+export function getConfigLink(id: string) {
+  return apiRequest<ConfigLinkDto>(`/configs/${id}/link`)
+}
+
+export function getMySubscription() {
+  return apiRequest<MySubscriptionDto>('/subscription')
+}