feat: add Medusa Cloud OAuth provider (#14395)

* feat: add Medusa Cloud OAuth provider

* add Cloud login button

* fetch whether cloud auth is enabled through api

* allow unregistered to get session

* handle existing users

* address PR comments

* prevent double execution

* a few more fixes

* fix callback url

* fix spelling

* refresh session

* 200 instead of 201

* only allow cloud identities to create user

* fix condition

packages/core/core-flows/src/auth/workflows/index.ts

@@ -1 +1,2 @@
 export * from "./generate-reset-password-token"
+export * from "./set-auth-app-metadata"

packages/core/core-flows/src/auth/workflows/set-auth-app-metadata.ts

@@ -0,0 +1,53 @@
+import {
+  createWorkflow,
+  WorkflowResponse,
+} from "@medusajs/framework/workflows-sdk"
+import {
+  setAuthAppMetadataStep,
+  SetAuthAppMetadataStepInput,
+} from "../steps/set-auth-app-metadata"
+
+export const setAuthAppMetadataWorkflowId = "set-auth-app-metadata-workflow"
+/**
+ * This workflow sets the `app_metadata` property of an auth identity. This is useful to
+ * associate a user (whether it's an admin user or customer) with an auth identity
+ * that allows them to authenticate into Medusa.
+ *
+ * You can learn more about auth identites in
+ * [this documentation](https://docs.medusajs.com/resources/commerce-modules/auth/auth-identity-and-actor-types).
+ *
+ * To use this for a custom actor type, check out [this guide](https://docs.medusajs.com/resources/commerce-modules/auth/create-actor-type)
+ * that explains how to create a custom `manager` actor type and manage its users.
+ *
+ * @example
+ * To associate an auth identity with an actor type (user, customer, or other actor types):
+ *
+ * ```ts
+ * const { result } = await setAuthAppMetadataWorkflow(container).run({
+ *   input: {
+ *     authIdentityId: "au_1234",
+ *     actorType: "user", // or `customer`, or custom type
+ *     value: "user_123"
+ *   }
+ * })
+ * ```
+ *
+ * To remove the association with an actor type, such as when deleting the user:
+ *
+ * ```ts
+ * const { result } = await setAuthAppMetadataWorkflow(container).run({
+ *   input: {
+ *     authIdentityId: "au_1234",
+ *     actorType: "user", // or `customer`, or custom type
+ *     value: null
+ *   }
+ * })
+ * ```
+ */
+export const setAuthAppMetadataWorkflow = createWorkflow(
+  setAuthAppMetadataWorkflowId,
+  (input: SetAuthAppMetadataStepInput) => {
+    const authIdentity = setAuthAppMetadataStep(input)
+    return new WorkflowResponse(authIdentity)
+  }
+)