feat(core): guard one-time token on consent request

[charIeszhao]

Summary

• Guard one-time token on consent request. This makes sure even if the user has an active session, when they use magic sign-in link, the token is still checked before auto-consent.
• Change the client side navigation mechanism when one_time_token param is presented in the URL. The logic is now handled separately in both /sign-in and /register routes.

Testing

Local dev test

Checklist

• .changeset
• unit tests
• integration tests
• necessary TSDoc comments

[github-actions]

COMPARE TO master

Total Size Diff 📈 +5.22 KB

Diff by File

Name	Diff
packages/core/src/middleware/koa-consent-guard.test.ts	📈 +2.78 KB
packages/core/src/middleware/koa-consent-guard.ts	📈 +1.48 KB
packages/core/src/tenants/Tenant.ts	📈 +143 Bytes
packages/experience/src/App.tsx	📈 +198 Bytes
packages/experience/src/pages/OneTimeToken/index.tsx	📈 +55 Bytes
packages/experience/src/pages/Register/index.tsx	📈 +242 Bytes
packages/experience/src/pages/SignIn/index.tsx	📈 +280 Bytes
packages/experience/src/pages/SwitchAccount/index.module.scss	0 Bytes
packages/experience/src/pages/SwitchAccount/index.tsx	📈 +496 Bytes
packages/experience/src/utils/search-parameters.ts	📈 +428 Bytes

[simeng-li]

updates are needed

should fix the error handling logic

[simeng-li]

Need to fix the email miss match error handling logic.

[simeng-li]

LGTM