feat(auth): add authentication endpoints (#6265)

**What**
- Add authentication endpoints: 
  - `/auth/[scope]/[provider]` 
  - `/auth/[scope]/[provider]/callback`
- update authenticate-middleware handler
- Add scope field to user
- Add unique constraint on scope and entity_id

note: there's still some remaining work related to jwt auth to be handled, this is mainly focussed on session auth with endpoints



Co-authored-by: Sebastian Rindom <7554214+srindom@users.noreply.github.com>

packages/auth/integration-tests/__fixtures__/auth-user/index.ts

@@ -1,5 +1,5 @@
-import { SqlEntityManager } from "@mikro-orm/postgresql"
 import { AuthUser } from "@models"
+import { SqlEntityManager } from "@mikro-orm/postgresql"
 
 export async function createAuthUsers(
   manager: SqlEntityManager,
@@ -8,15 +8,18 @@ export async function createAuthUsers(
       id: "test-id",
       entity_id: "test-id",
       provider: "manual",
+      scope: "store",
     },
     {
       id: "test-id-1",
       entity_id: "test-id-1",
       provider: "manual",
+      scope: "store",
     },
     {
       entity_id: "test-id-2",
       provider: "store",
+      scope: "store",
     },
   ]
 ): Promise<AuthUser[]> {

packages/auth/integration-tests/__tests__/services/auth-user/index.spec.ts

@@ -1,12 +1,11 @@
-import { SqlEntityManager } from "@mikro-orm/postgresql"
 import { AuthUserService } from "@services"
-
+import ContainerLoader from "../../../../src/loaders/container"
 import { MikroOrmWrapper } from "../../../utils"
+import { SqlEntityManager } from "@mikro-orm/postgresql"
+import { asValue } from "awilix"
 import { createAuthProviders } from "../../../__fixtures__/auth-provider"
 import { createAuthUsers } from "../../../__fixtures__/auth-user"
 import { createMedusaContainer } from "@medusajs/utils"
-import { asValue } from "awilix"
-import ContainerLoader from "../../../../src/loaders/container"
 
 jest.setTimeout(30000)
 
@@ -229,7 +228,8 @@ describe("AuthUser Service", () => {
         {
           id: "test",
           provider_id: "manual",
-          entity_id: "test"
+          entity_id: "test",
+          scope: "store"
         },
       ])
 

packages/auth/integration-tests/__tests__/services/module/auth-user.spec.ts

@@ -246,6 +246,7 @@ describe("AuthModuleService - AuthUser", () => {
           id: "test",
           provider_id: "manual",
           entity_id: "test",
+          scope: "store",
         },
       ])
 

packages/auth/integration-tests/__tests__/services/module/providers.spec.ts

@@ -83,7 +83,7 @@ describe("AuthModuleService - AuthProvider", () => {
       const { success, error } = await service.authenticate(
         "emailpass",
         {
-          scope: "non-existing",
+          authScope: "non-existing",
         } as any
       )
 

packages/auth/integration-tests/__tests__/services/providers/username-password.spec.ts

@@ -1,6 +1,6 @@
-import { AuthenticationInput, IAuthModuleService } from "@medusajs/types"
 import { MedusaModule, Modules } from "@medusajs/modules-sdk"
 
+import { IAuthModuleService } from "@medusajs/types"
 import { MikroOrmWrapper } from "../../../utils"
 import Scrypt from "scrypt-kdf"
 import { SqlEntityManager } from "@mikro-orm/postgresql"
@@ -62,6 +62,7 @@ describe("AuthModuleService - AuthProvider", () => {
         {
           provider: "emailpass",
           entity_id: email,
+          scope: "store",
           provider_metadata: {
             password: passwordHash,
           },
@@ -73,8 +74,8 @@ describe("AuthModuleService - AuthProvider", () => {
           email: "test@test.com",
           password: password,
         },
-        scope: "store",
-      })
+        authScope: "store",
+      } as any)
 
       expect(res).toEqual({
         success: true,
@@ -92,8 +93,8 @@ describe("AuthModuleService - AuthProvider", () => {
 
       const res = await service.authenticate("emailpass", {
         body: { email: "test@test.com" },
-        scope: "store",
-      })
+        authScope: "store",
+      } as any)
 
       expect(res).toEqual({
         success: false,
@@ -106,8 +107,8 @@ describe("AuthModuleService - AuthProvider", () => {
 
       const res = await service.authenticate("emailpass", {
         body: { password: "supersecret" },
-        scope: "store",
-      })
+        authScope: "store",
+      } as any)
 
       expect(res).toEqual({
         success: false,
@@ -127,6 +128,7 @@ describe("AuthModuleService - AuthProvider", () => {
         // Add authenticated user
         {
           provider: "emailpass",
+          scope: "store",
           entity_id: email,
           provider_metadata: {
             password_hash: passwordHash,
@@ -139,8 +141,8 @@ describe("AuthModuleService - AuthProvider", () => {
           email: "test@test.com",
           password: "password",
         },
-        scope: "store",
-      })
+        authScope: "store",
+      } as any)
 
       expect(res).toEqual({
         success: false,