feat: Direct login for Launch Admin Panel (All team) [Task-18]

[mayankjha-eng]

Description

Admin Panel SSO (Any role)

Summary

Implemented secure Single Sign-On (SSO) between Sparrow Desktop → Sparrow API → Sparrow Admin App, allowing All Team to auto-login to the Admin Panel.

---

What’s Included

Backend (Identity API)

• Added POST /api/auth/admin-sso-token
• Protected with JwtAuthGuard
• Validates user via isTeamOwnerOrAdmin
• Generates short-lived (5 min) SSO token
• Enforces type: "admin-sso"

Admin API

• Added POST /api/admin/auth/validate-sso
• Verifies SSO token + token type
• Issues real access + refresh tokens
• Logs user in automatically

Desktop App

• Calls SSO endpoint with teamId
• Redirects to Admin /sso route

Admin App

• Added /sso route with SSO validation
• Fixed routing order to prevent authentication flicker

---

Final Behavior

Role	Result
Owner	Auto-login
Admin	Auto-login
Member	Auto-login

---

Add Issue Number

Task-18

Add Screenshots/GIFs

Before.Launch.Admin.Panel.mp4

After.Launch.Admin.Panel.mp4

Add Known Issue

If applicable, add any known issues.

Contribution Checklist:

• The pull request only addresses one issue or adds one feature.
• I have linked an issue to the pull request.
• I have linked a PR type label to the pull request.
• The pull request does not introduce any breaking changes
• I have added screenshots or gifs to help explain the change if applicable.
• I have read the contribution guidelines.

Note: Keeping the PR small and focused helps make it easier to review and merge. If you have multiple changes you want to make, please consider submitting them as separate pull requests.