refactor(server): auth (#5895)

Remove `next-auth` and implement our own Authorization/Authentication system from scratch.

## Server

- [x] tokens
  - [x] function
  - [x] encryption

- [x] AuthController
  - [x] /api/auth/sign-in
  - [x] /api/auth/sign-out
  - [x] /api/auth/session
  - [x] /api/auth/session (WE SUPPORT MULTI-ACCOUNT!)

- [x] OAuthPlugin
  - [x] OAuthController
  - [x] /oauth/login
  - [x] /oauth/callback
  - [x] Providers
    - [x] Google
    - [x] GitHub

## Client

- [x] useSession
- [x] cloudSignIn
- [x] cloudSignOut

## NOTE:

Tests will be adding in the future

packages/backend/server/src/data/migrations/1605053000403-self-host-admin.ts

@@ -1,13 +1,15 @@
 import { ModuleRef } from '@nestjs/core';
-import { hash } from '@node-rs/argon2';
 import { PrismaClient } from '@prisma/client';
 
-import { Config } from '../../fundamentals';
+import { UserService } from '../../core/user';
+import { Config, CryptoHelper } from '../../fundamentals';
 
 export class SelfHostAdmin1605053000403 {
   // do the migration
-  static async up(db: PrismaClient, ref: ModuleRef) {
+  static async up(_db: PrismaClient, ref: ModuleRef) {
     const config = ref.get(Config, { strict: false });
+    const crypto = ref.get(CryptoHelper, { strict: false });
+    const user = ref.get(UserService, { strict: false });
     if (config.isSelfhosted) {
       if (
         !process.env.AFFINE_ADMIN_EMAIL ||
@@ -17,13 +19,12 @@ export class SelfHostAdmin1605053000403 {
           'You have to set AFFINE_ADMIN_EMAIL and AFFINE_ADMIN_PASSWORD environment variables to generate the initial user for self-hosted AFFiNE Server.'
         );
       }
-      await db.user.create({
-        data: {
-          name: 'AFFINE First User',
-          email: process.env.AFFINE_ADMIN_EMAIL,
-          emailVerified: new Date(),
-          password: await hash(process.env.AFFINE_ADMIN_PASSWORD),
-        },
+      await user.findOrCreateUser(process.env.AFFINE_ADMIN_EMAIL, {
+        name: 'AFFINE First User',
+        emailVerifiedAt: new Date(),
+        password: await crypto.encryptPassword(
+          process.env.AFFINE_ADMIN_PASSWORD
+        ),
       });
     }
   }