Auth0 support

[daniel-sali]

Summary by CodeRabbit

• New Features

  • Added Auth0 OAuth authentication support with automatic user provisioning.
  • Enabled cross-origin iframe embedding via updated security headers.

• Configuration

  • Updated session cookie settings to support iframe scenarios.
  • Modified frame embedding policy from X-Frame-Options to Content-Security-Policy.

[greptile-apps]

Your free trial has ended. If you'd like to continue receiving code reviews, you can add a payment method here.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: dda8fc55-8a98-4aa1-bb7e-720e66fc074d

📥 Commits

Reviewing files that changed from the base of the PR and between 3f709d6 and 88d2eb8.

📒 Files selected for processing (10)

• .env.example
• compose.yml
• services/platform/convex/auth.test.ts
• services/platform/convex/auth.ts
• services/platform/convex/betterAuth/__tests__/provision_auth0_user.test.ts
• services/platform/convex/betterAuth/provision_auth0_user.ts
• services/platform/docker-entrypoint.sh
• services/platform/lib/auth-client.ts
• services/proxy/Caddyfile
• services/proxy/docker-entrypoint.sh

---

📝 Walkthrough

Walkthrough

This pull request implements Auth0 OAuth integration across the platform and proxy services. The changes include adding Auth0 configuration environment variables to .env.example, updating the Better Auth setup in services/platform/convex/auth.ts to conditionally load the genericOAuth plugin with Auth0 credentials, and introducing a new provisionAuth0User module that creates organization memberships for Auth0-authenticated users. Supporting infrastructure changes include updating Docker Compose configuration with quote standardization and an additional proxy port, extending the Convex deployment script to synchronize Auth0 environment variables, adding client-side genericOAuthClient plugin support, and modifying the proxy's security headers from X-Frame-Options to Content-Security-Policy with frame-ancestors. The proxy docker entrypoint script was also refactored to simplify TLS mode handling.

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~50 minutes

Possibly related PRs

• fix(platform): improve auth token handling and env loading #253: Both PRs modify services/platform/convex/auth.ts to extend Better Auth configuration, adding OAuth/authentication features.
• feat(deployment): implement zero-downtime blue-green deployment #60: Both PRs modify services/proxy/Caddyfile and services/proxy/docker-entrypoint.sh to change security headers and TLS configuration handling.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}