refactor(server): auth (#5895)

Remove `next-auth` and implement our own Authorization/Authentication system from scratch.

## Server

- [x] tokens
  - [x] function
  - [x] encryption

- [x] AuthController
  - [x] /api/auth/sign-in
  - [x] /api/auth/sign-out
  - [x] /api/auth/session
  - [x] /api/auth/session (WE SUPPORT MULTI-ACCOUNT!)

- [x] OAuthPlugin
  - [x] OAuthController
  - [x] /oauth/login
  - [x] /oauth/callback
  - [x] Providers
    - [x] Google
    - [x] GitHub

## Client

- [x] useSession
- [x] cloudSignIn
- [x] cloudSignOut

## NOTE:

Tests will be adding in the future

packages/backend/server/src/core/utils/validators.ts

@@ -0,0 +1,55 @@
+import { BadRequestException } from '@nestjs/common';
+import z from 'zod';
+
+function getAuthCredentialValidator() {
+  const email = z.string().email({ message: 'Invalid email address' });
+  let password = z.string();
+
+  const minPasswordLength = AFFiNE.node.prod ? 8 : 1;
+  password = password
+    .min(minPasswordLength, {
+      message: `Password must be ${minPasswordLength} or more charactors long`,
+    })
+    .max(20, { message: 'Password must be 20 or fewer charactors long' });
+
+  return z
+    .object({
+      email,
+      password,
+    })
+    .required();
+}
+
+function assertValid<T>(z: z.ZodType<T>, value: unknown) {
+  const result = z.safeParse(value);
+
+  if (!result.success) {
+    const firstIssue = result.error.issues.at(0);
+    if (firstIssue) {
+      throw new BadRequestException(firstIssue.message);
+    } else {
+      throw new BadRequestException('Invalid credential');
+    }
+  }
+}
+
+export function assertValidEmail(email: string) {
+  assertValid(getAuthCredentialValidator().shape.email, email);
+}
+
+export function assertValidPassword(password: string) {
+  assertValid(getAuthCredentialValidator().shape.password, password);
+}
+
+export function assertValidCredential(credential: {
+  email: string;
+  password: string;
+}) {
+  assertValid(getAuthCredentialValidator(), credential);
+}
+
+export const validators = {
+  assertValidEmail,
+  assertValidPassword,
+  assertValidCredential,
+};