Add support for autoclosing oauth flow window

[stgarf]

Summary

This solves a small UX friction point. It can be tested by using something that makes use of the interactive flow like gitsign and I've integrated those changes here to test with.

Update go.mod to contain:
replace github.com/sigstore/sigstore => github.com/stgarf/sigstore 510ce9e

and then run go mod tidy. You should be able to test out the changes. Of note is that the page will not close automatically if no connectorid (for gitsign for example) is set due to the fact that the window.close API call will only succeed if the page is the first item in the window's history.

git config --local commit.gpgsign true  # Sign all commits
git config --local tag.gpgsign true  # Sign all tags
git config --local gpg.x509.program gitsign  # Use gitsign for signing
git config --local gpg.format x509  # gitsign expects x509 args
git config --local gitsign.autoclose true
git config --local gitsign.autoclosetimeout 5
git config --local gitsign.connectorid https://accounts.google.com

Release Note

Updated the interactiveIDTokenSource struct to have autoclose and autocloseTimeout fields which default to false and 0 respectively. The original InteractiveSuccessHTML returned in flow.go has been changed from a static string to a dynamic go template which can be returned with a call to GetInteractiveSuccessHTML(autoclose bool, timeout int).

Documentation

This may require an update to docs but I am not sure where. I've only seen gitsign using this so far and I've already made some documentation updates in my fork of it.

[kommendorkapten]

Code looks good, but I haven't tested it.

[haydentherapper]

@wlynch @imjasonh pinging you here too, @bobcallaway was wondering if you had tried this out and run into an issue

[wlynch]

I tried to get it working awhile back and had trouble, but my javascript is also very weak. (@stgarf If you happened know why my last attempt to get this to work wasn't successful, I'd love to learn why! 🙏 )

@stgarf made a similar change in chainctl and we confirmed it works, so I'm all for this! 🚀

[stgarf]

@wlynch to answer your question for posterity the page will not close automatically if it was redirected to from another page, e.g. no social login was set, due to the fact that the window.close API call will only succeed if the page is the first item in the window's history.

[stgarf]

Thanks folks! Commits have been squashed.