feat: self-serve tier — PR 7/12 — Sign-In, Session & Auth Broker
loading diff…
Stack order: Merge after PR 6 — Signup Flow.
Updates sign-in, session management, and the auth broker to support multi-tenant SSO where self-serve orgs share a single FusionAuth tenant.
api/auth/session/route.ts): Detects self-serve orgs and routes to correct OAuth flowapi/auth/logout/route.ts): Multi-tenant cookie cleanupapp/signin/page.tsx): Self-serve IDP detection (shows Google/Microsoft buttons)server/auth-broker-sso.ts): SSO handling for shared FusionAuth tenantserver/auth-broker.ts): Multi-tenant JWT verification for MCP OAuthserver/auth-broker-validation.ts): Validates tokens across tenantsproxy.ts): Updated for self-serve org auth configuration| # | PR | Link |
|---|---|---|
| 1 | Foundation | #458 |
| 2 | Core orgId Resolution | #459 |
| 3 | Routers: orgs, audit, onboarding | #460 |
| 4 | Routers: teams, connections, me | #461 |
| 5 | Routers: apps, auth-configs, misc | #462 |
| 6 | Self-Serve Signup Flow | #463 |
| 7 | Sign-In & Auth Broker | this PR |
| 8 | Trial UI | #465 |
| 9 | Enterprise Tier Gates | #466 |
| 10 | Trial Lifecycle | #467 |
| 11 | Proxy Trial Lock | #468 |
| 12 | Tests & Fixtures | #469 |