[WIP] Drop dependency on auth0

[OliverDudgeon]

Motivation

Currently we use the nextjs-auth0 package despite using Keycloak as our auth provider. Since auth0 doesn't exactly implement OAuth 2.x and OIDC ¹, we should ideally not be using this package. Keycloak lacks good off the shelf adapters for NextJS. ²

Options

Implement Own Adapater

This shouldn't be too tricky as it's just web requests for tokens. This will need to integrate with the different parts of NextJS: API routes, middleware, RSCs.

• https://github.com/badgateway/oauth2-client
• https://github.com/AxaFrance/oidc-client
• https://github.com/authts/oidc-client-ts
• https://github.com/Archelyst/oauth2-pkce

Footnotes

1. Need to find docs listing differences ↩

2. There are React ones but these don't work great with NextJS's server side stuff. ↩