SSO: Login/Logout

[louispt1]

Context

Replace next-auth with the shared etm_session JWT cookie

• Drops next-auth entirely
• Adds pages/api/me.ts which verifies the cookie's signature via jose's remote JWKS /oauth/discovery/keys
• Audience is currently unchecked (would need to define client_uri in env to handle that
• Adds useCurrentUser/useSessionKeeper hooks so the UI polls its own identity and schedules a refresh before the cookie expires
• Updates Connection.ts/scenario API routes to send the cookie instead of a next-auth bearer token
• Tests with Jest for api/me that needed some config for jose!

Related - Goes with the other SSO: Login/Logout PRs:

identity rails
etengine
etmodel
myetm
collections
ETLauncher

Checklist

• I have tested these changes --> NOTE: These changes were tested on the ETLauncher bridge network. Testing the federated cookie setup on the standard dev setup will not work because cookies cannot be federated across localhost as a domain
• I have updated documentation as needed (comments only)
• I have tagged the relevant people for review

[netlify]

✅ Deploy Preview for beta-collections ready!

Name	Link
🔨 Latest commit	e4594aa
🔍 Latest deploy log	https://app.netlify.com/projects/beta-collections/deploys/6a4bb363e5160c0008b54445
😎 Deploy Preview	https://deploy-preview-124--beta-collections.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.