Apply security policy to auth controller

[MarceloRGonc]

Fixes OPS-3876.

[linear]

OPS-3876 Apply Security Policy to auth controller

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

Adds route-level security metadata to authentication endpoints (OPS-3876), introducing an explicit analytics permission and attaching scoped route policies to auth/analytics routes.

Changes:

• Add new shared permission Permission.WRITE_ANALYTICS.
• Attach project-scoped route security policies (with analytics permission) to analytics auth endpoints.
• Attach an organization-scoped route security policy (with user write permission) to the sign-up endpoint and update the unit test for the new Fastify route signature.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
packages/shared/src/lib/common/security/permission.ts	Introduces WRITE_ANALYTICS permission constant.
packages/server/api/src/app/authentication/authentication.controller.ts	Adds scoped config.security route policies (analytics + sign-up) and updates analytics embed route to include Fastify options/config.
packages/server/api/test/unit/authentication/authentication.controller.test.ts	Updates assertion to account for the added route options argument on app.get('/analytics-embed-id', ...).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.