[next] Auth Popup v2 (#2101)

* feat: Implement new Sign In view

* feat: Move forgot + resetPassword to new design

* feat: Implement sign up with new design

* fix: narrow gutter

* test: add unit tests

* test: integration tests

* feat: support show / hide password

* feat: support oauth2 flow

* feat: add views for user completion

* feat: implement oauth2 sign up

* test: fix snapshots

* fix: lint

* fix: get more complete mutation response

* fix: removed array of OIDC integrations

* fix: renamed resolver function

* fix: adapt oidc client implementation

* fix: targetFilter should be stream on signup

* fix: removed unneeded message

* fix: moved password into local profile

* fix: made username optional, removed valid null value

* fix: linting

* fix: respect targetFilter

* feat: support user registration mutations

- Added `setUsername`
- Added `setEmail`
- Added `setPassword`
- Added `permit` to `@auth`
- Added `email` to `User`

* fix: fixed issue with query

* feat: added user password update

* feat: complete sign in mutation

* fix: adapt some rebasing gitches

* test: improve tests

* test: unittest for setting auth token

* fix: failing tests

* test: move most tests from enzyme to react-test-renderer

* fix: remove schema warnings in tests

* test: improve window mock

* test: test different social login configurations

* test: test social logins for sign up

* fix: use htmlFor instead of for

* test: more feature tests

* feat: always go through account completion

* test: feature test account completion

* feat: addtional account completion test

* Update start.ts

* chore: refactor auth token retrieval logic

src/core/server/models/settings.ts

@@ -1,55 +1,20 @@
+import { Omit } from "talk-common/types";
 import {
-  GQLAuth,
+  GQLAuthDisplayNameConfiguration,
   GQLCharCount,
   GQLEmail,
   GQLExternalIntegrations,
+  GQLFacebookAuthIntegration,
+  GQLGoogleAuthIntegration,
   GQLKarma,
+  GQLLocalAuthIntegration,
   GQLMODERATION_MODE,
+  GQLOIDCAuthIntegration,
   GQLReactionConfiguration,
+  GQLSSOAuthIntegration,
   GQLWordList,
 } from "talk-server/graph/tenant/schema/__generated__/types";
 
-// export interface EmailDomainRuleCondition {
-//   /**
-//    * emailDomain is the domain name component of the email addresses that should
-//    * match for this condition.
-//    */
-//   emailDomain: string;
-//   /**
-//    * emailVerifiedRequired stipulates that this rule only applies when the user
-//    * account has been marked as having their email address already verified.
-//    */
-//   emailVerifiedRequired: boolean;
-// }
-
-// /**
-//  * RoleRule describes the role assignment for when a user logs into Talk, how
-//  * they can have their account automatically upgraded to a specific role when
-//  * the domain for their email matches the one provided.
-//  */
-// export interface RoleRule extends Partial<EmailDomainRuleCondition> {
-//   /**
-//    * role is the specific GQLUSER_ROLE that should be assigned to the newly
-//    * created user depending on their email address.
-//    */
-//   role: GQLUSER_ROLE;
-// }
-
-// export interface AuthRules {
-//   /**
-//    * roles allow the configuration of automatic role assignment based on the
-//    * user's email address.
-//    */
-//   roles?: RoleRule[];
-
-//   /**
-//    * restrictTo when populated, will restrict which users can login using this
-//    * integration. If a user successfully logs in using the OIDCStrategy, but
-//    * does not match the following rules, the user will not be created.
-//    */
-//   restrictTo?: EmailDomainRuleCondition[];
-// }
-
 export interface ModerationSettings {
   moderation: GQLMODERATION_MODE;
   requireEmailConfirmation: boolean;
@@ -67,6 +32,46 @@ export interface ModerationSettings {
   charCount: GQLCharCount;
 }
 
+export type LocalAuthIntegration = GQLLocalAuthIntegration;
+export type SSOAuthIntegration = GQLSSOAuthIntegration;
+
+export type OIDCAuthIntegration = Omit<
+  GQLOIDCAuthIntegration,
+  "callbackURL" | "redirectURL"
+>;
+
+export type GoogleAuthIntegration = Omit<
+  GQLGoogleAuthIntegration,
+  "callbackURL" | "redirectURL"
+>;
+
+export type FacebookAuthIntegration = Omit<
+  GQLFacebookAuthIntegration,
+  "callbackURL" | "redirectURL"
+>;
+
+export interface AuthIntegrations {
+  local: LocalAuthIntegration;
+  sso: SSOAuthIntegration;
+  oidc: OIDCAuthIntegration;
+  google: GoogleAuthIntegration;
+  facebook: FacebookAuthIntegration;
+}
+
+export interface Auth {
+  /**
+   * integrations are the set of configurations for the variations of
+   * authentication solutions.
+   */
+  integrations: AuthIntegrations;
+
+  /**
+   * displayName contains configuration related to the use of Display Names
+   * across AuthIntegrations.
+   */
+  displayName: GQLAuthDisplayNameConfiguration;
+}
+
 export interface Settings extends ModerationSettings {
   customCssUrl?: string;
 
@@ -96,7 +101,7 @@ export interface Settings extends ModerationSettings {
   /**
    * Set of configured authentication integrations.
    */
-  auth: GQLAuth;
+  auth: Auth;
 
   /**
    * Various integrations with external services.