feat: manage user API tokens

[sdankel]

• Adds the ability for logged in users to create, view, and revoke API tokens
• Refactors the session token handling to use a session cookie instead of local storage
• Replaces use of fetch with axios for more ergonomic http calls
• Also set up typed axios so we have strongly typed API calls on the typescript side.
• Adds rocket request guards for the two times of authentication: session-based and API token-based. This makes it easy to indicate which requests require which authentication and have standard error handling around authentication.

You can test using one of the API tokens with curl:

curl 'http://localhost:8080/publish' \
  -H 'Authorization: Bearer <API Token>' \
  -H 'Origin: http://localhost:3000' \
  --data-raw '{"name":"my-pkg", "version": "1.2.3"}'

The server should print Publishing: Json(PublishRequest { name: "my-pkg", version: "1.2.3" }) for token: "<name>" if it's a valid token, and respond with 401 Unauthorized if not.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
forc-pub	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 7, 2024 3:07am

[kayagokalp]

Looks nice! I haven't done so much full-stack dev in the past but looks really clean to me :) Couldn't test locally yet I am having some trouble with docker sadly as soon as I can run it, will place a review. Hopefully today 🙏

[JoshuaBatty]

I can't seem to get postgres working locally to test this out. I think the code looks good so i'm approving to hold this up.