Skip to content

Conversation

@amrit110
Copy link
Member

This pull request introduces comprehensive Google OAuth 2.0 authentication with domain restriction to the Onboarding Status Web dashboard. It adds server-side session management, new authentication API routes, and updates documentation and deployment configuration to support secure login for @vectorinstitute.ai users only. Environment variables and deployment workflows are updated to ensure proper integration and security.

Authentication System Implementation

  • Added full Google OAuth 2.0 authentication flow with PKCE, domain restriction, and encrypted session management using iron-session. New API routes were created for login (/api/auth/login), callback (/api/auth/callback), logout (/api/auth/logout), and session info (/api/auth/session). Only @vectorinstitute.ai email addresses are allowed. [1] [2] [3] [4] [5] [6]

Documentation Updates

  • Added detailed authentication documentation (onboarding-status-web-auth.md), updated the main README with setup, environment variables, and troubleshooting for authentication, and included the new doc in the navigation. [1] [2] [3] [4] [5] [6] [7]

Configuration and Environment Variables

  • Introduced new required and optional environment variables for OAuth and session management in .env.example and documentation, including NEXT_PUBLIC_GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, SESSION_SECRET, NEXT_PUBLIC_APP_URL, REDIRECT_URI, and ALLOWED_DOMAINS. [1] [2]

Deployment Workflow Enhancements

  • Updated GitHub Actions workflow to inject new authentication-related environment variables into the test and deployment jobs, ensuring secrets are used securely in production. [1] [2]

@amrit110 amrit110 self-assigned this Nov 28, 2025
@amrit110 amrit110 added documentation Improvements or additions to documentation enhancement New feature or request labels Nov 28, 2025
@codecov
Copy link

codecov bot commented Nov 28, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.09%. Comparing base (72c64df) to head (b078737).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #39   +/-   ##
=======================================
  Coverage   88.09%   88.09%           
=======================================
  Files           3        3           
  Lines         462      462           
=======================================
  Hits          407      407           
  Misses         55       55           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@amrit110 amrit110 merged commit b42613a into main Nov 28, 2025
8 checks passed
@amrit110 amrit110 deleted the add_auth_for_onboarding_status_page branch November 28, 2025 15:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants