Add Authentication and Authorization workflow

[Eprince-hub]

Add the authentication and authorization workflow to the GraphQL example so that users can register, login, and logout. This workflow also includes the protection of some pages and user-generated content by preventing unauthenticated users from accessing some parts of the application

TODOs

• create new migrations for the auth workflow
  • users table
  • notes table
  • sessions table
• create database query functions
  • database query function without session token
    • database/users.ts
      • getUserInsecure
      • getUserWithPasswordHashInsecure
      • createUserInsecure
    • database/sessions.ts
      • createSessionInsecure
  • secured database query functions with session token
    • database/users.ts
      • getUser
    • database/notes.ts
      • getNotes
      • getNote
      • createNote
    • database/sessions.ts
      • getValidSession
      • deleteSession
• 🤔 create onboarding page
  • add link to register page
  • add link to login page
• create registration workflow
  • add a registration form
    • send HTTP request to the register API route
  • create register API route
    • create sessions
• create login workflow
  • add a login form
    • send HTTP request to the login API route
  • create login API route
    • create sessions
• prevent authenticated users from accessing the register page
• prevent authenticated users from accessing the login page
• refactor cookie options
  • util/cookies.ts
    • export secureCookieOptions object
• create a logout workflow
  • add a logout form
    • send HTTP request to the logout API route
  • create logout API route
    • delete sessions
• prevent unauthenticated users from accessing the guests page
  • return user to guests page after login using returnTo query parameter
• React Native authorization
  • Notes (user generated content)
    • create Notes page
      • send HTTP request to the notes API route
    • create notes API route
      • authenticated user can create notes
      • authenticated user can query notes
    • create Note page
      • send HTTP request to the note API route
    • create note API route
      • authenticated user can query note
  • authorization on note pages
    • only show notes where current user is note owner on notes page
    • "Access Denied" on the single note page
  • add notes navigation link to bottom navigation

[ProchaLu]

We decided not to do auth in the first Expo lecture, but rather as a PR in the "auth-restricting-access" lecture

• https://github.com/upleveled/courses/pull/2897

Superseded by

• Add Authentication and Authorization workflow expo-example-fall-2024-eu#1