Add Keycloak OAuth login

[nickclyde]

PULL REQUEST

Summary

This adds an OAuth login flow to the app. Instead of using the sign in page, the sign in button in the Header now redirects to Keycloak. When you login with Keycloak successfully, it redirects back to the app at /query.

To test this locally, be sure to npm install to get auth.js, then you can run Keycloak via the configuration I added to the docker compose dev file. EG docker compose -f docker-compose-dev.yaml up keycloak. Once it's running, you'll need to go to http://localhost:8080 and create a client named query-connector. Then you'll need to grab the client secret and set the following variables in .env:

AUTH_KEYCLOAK_ID=query-connector
AUTH_KEYCLOAK_SECRET=your-client-secret
AUTH_KEYCLOAK_ISSUER=http://localhost:8080/realms/master

More info on this page: https://authjs.dev/getting-started/providers/keycloak

Related Issue

Fixes https://linear.app/skylight-cdc/issue/QUE-22/spike-for-supporting-key-cloak

[linear]

QUE-22 SPIKE for supporting Key Cloak

[robertandremitchell]

I made it to this page but did not see a client secret? Is there an additional step we need to do here in terms of the client authentication?

[m-goggins]

Is there supposed to be an option to create a user on the localhost:8080 page? I can only see a login:

[robertandremitchell]

Is there supposed to be an option to create a user on the localhost:8080 page? I can only see a login:

I got in using admin/admin based off docker dev, not sure if that's right tho