feat(extension): google oauth - jwt auth flow (Week 2 AC 1)

[BODMAT]

Implements full auth flow between Chrome Extension and Next.js Dashboard.

What's included

Dashboard

• POST /api/auth/extension — verifies Google ID token via google-auth-library, upserts User in DB, returns signed JWT
• server/auth.ts — business logic (verify → upsert → issue)
• server/schemas/auth.ts — Zod input schema

Extension

• background/index.ts — launchWebAuthFlow (OIDC, response_type=id_token), JWT exchange, storage, auto-refresh, apiFetch() helper for AC 5
• types/auth.ts — StoredAuth, AuthMessage, AuthResponse types
• manifest.ts — added identity permission
• Popup — Login / Logout / status display

JWT lives only in chrome.storage.local (service worker). Popup and content script communicate via chrome.runtime.sendMessage.

Testing

Requires Google Cloud Console OAuth 2.0 Client ID configured for Chrome Extension type with the unpacked extension ID.

Closes Week 2 AC 1

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
worktrace	Ready	Preview, Comment	May 21, 2026 9:07pm