Fix customize supertokens auth

[victor-enogwe]

What does this PR do?

This PR re-implements the Supertoken's Auth

Use Case

closes #1227
clean up for #1228

[Copilot]

Pull Request Overview

This PR migrates from supertokens-auth-react to supertokens-web-js, reimplementing authentication with a custom session management system and refactoring the Google OAuth flow.

Key Changes:

• Migrated to supertokens-web-js v0.16.0, removing the React-specific auth library
• Implemented custom Session class with RxJS-based event handling for session state management
• Refactored authentication flow to use SuperTokens ThirdParty recipe with direct Google OAuth integration
• Extracted user metadata management into a dedicated service and added skipOnboarding support

Reviewed Changes

Copilot reviewed 71 out of 72 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
yarn.lock	Upgraded supertokens-web-js to v0.16.0, removed supertokens-auth-react and related unused dependencies
packages/web/src/common/classes/Session.ts	New Session wrapper class providing event-based session management with RxJS observables
packages/web/src/auth/SessionProvider.tsx	New SessionProvider for managing authentication state across the app
packages/web/src/common/hooks/useGoogleAuth.ts	Centralized Google OAuth logic for reuse across onboarding and login flows
packages/web/src/views/Onboarding/OnboardingFlow.tsx	Updated onboarding to support skipOnboarding metadata and improved flow control
packages/backend/src/common/middleware/supertokens.middleware.ts	Configured ThirdParty recipe with Google OAuth and implemented signup/signin logic
packages/backend/src/user/services/user-metadata.service.ts	Extracted user metadata operations into dedicated service
packages/backend/src/auth/services/compass.auth.service.ts	Implemented separate googleSignup and googleSignin methods with user ID mapping
packages/backend/src/priority/services/priority.service.ts	Refactored to use bulk upsert operations and support MongoDB sessions
packages/web/src/socket/SocketProvider.tsx	Updated WebSocket handling to work with new session management

[Copilot]

Pull Request Overview

Copilot reviewed 75 out of 76 changed files in this pull request and generated 7 comments.

Comments suppressed due to low confidence (1)

packages/backend/src/auth/services/google.auth.service.ts:141

• [nitpick] Method renamed from getAccessToken to refreshAccessToken, but the error message still says 'Google auth access token not returned'. Consider updating to 'Failed to refresh Google auth access token'.

  async refreshAccessToken() {
    const { token } = await this.oauthClient.getAccessToken();

    if (!StringV4Schema.safeParse(token).success) {
      throw error(
        AuthError.NoGAuthAccessToken,
        "Google auth access token not returned",
      );
    }

[Copilot]

Pull Request Overview

Copilot reviewed 69 out of 70 changed files in this pull request and generated 8 comments.

[Copilot]

Pull Request Overview

Copilot reviewed 69 out of 70 changed files in this pull request and generated 11 comments.

Comments suppressed due to low confidence (1)

packages/backend/src/auth/services/google.auth.service.ts:142

• The method name changed from getAccessToken to refreshAccessToken, but the implementation only calls getAccessToken(). This is misleading. If the intent is to refresh the token, the implementation should be updated, or the method should be renamed back.

  async refreshAccessToken() {
    const { token } = await this.oauthClient.getAccessToken();

    if (!StringV4Schema.safeParse(token).success) {
      throw error(
        AuthError.NoGAuthAccessToken,
        "Google auth access token not returned",
      );
    }

[Copilot]

Pull Request Overview

Copilot reviewed 69 out of 70 changed files in this pull request and generated 10 comments.

[Copilot]

Pull Request Overview

Copilot reviewed 72 out of 73 changed files in this pull request and generated 4 comments.