Feat/auth for rsvp

[0xDracula]

add hack club auth oauth flow and session cookie

the RSVP feature needs to know who the user is before they can RSVP.

added:

• lib/session.js — iron-session cookie config
• pages/api/auth/login.js — redirects to Hack Club Auth with CSRF state
• pages/api/auth/callback.js — exchanges authorization code for ID token, extracts slack_id, sets session cookie
• pages/api/auth/logout.js — clears session cookie
• pages/api/auth/me.js — returns { slackId } or { slackId: null }

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
events	Error		Jun 16, 2026 6:04am

[vercel]

Deployment failed with the following error:

The `vercel.json` schema validation failed with the following message: should NOT have additional property `public`

Learn More: https://vercel.com/docs/concepts/projects/project-configuration

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	iron-session@​8.0.4

View full report