Nextauth ms2

[FelipeTrost]

Summary

Used nextauth for auth in ms2 and implemented a middleware in the old ms that reads the nextauth cookies to authenticate requests.

Details MS2

• removed useAuthStore, auth status can be checked with useSession provided by nextauth
• new abilityStore
• MS2 fetches the ability from the old ms after login
• Auth guard runs in the server with getServerSession
• Adapted all page.tsx files to be rendered in the server

Details Old MS

• stop using loginSession if API_ONLY = true
• implemented getSessionFromCookie to read cookies set by nextauth and fill the req.session field when API_ONLY = true
• don't validate request's csrfToken if API_ONLY = true

[OhKai]

Empty return, probably typo?

[FelipeTrost]

I fixed it in my last commit.

[OhKai]

typo?

[FelipeTrost]

I fixed it with in last commit.

[FelipeTrost]

In my recent commits, I mainly made the following changes:

• MS2 now uses the environments repo (if it exists) for auth0 credential
• MS(old) and MS2 share the NextAuth secret through the environments repo, if it is not set in development, a default value is used
• Used csrf token for MS(old)