Login from CLI without manually creating a secret

[begelundmuller]

Problem to solve and solution

It's a barrier to have to create a CLI secret to login from the command line. We'll add a ticket-based login flow that opens in your browser when you run "beneath login".

Proposed solution and changes

• Create a model AuthenticationTickets
• Create resolvers for creating, approving and polling authentication tickets
• Create a frontend flow for approving tickets (e.g. /-/auth/ticket?ticket=XXX)
  • If logged in, ask for approval
  • If not logged in, redirect to auth, then direct back to approval page

Risks and challenges

• Make sure the flow works for new users who haven't previously created a user (i.e. they'll be shown the welcome screen before redirecting to the approval page)

[begelundmuller]

Implemented, ending with d641a8b