feat: [IDS-5149] Node18 upgrade

[sauntimo]

✏️ Changes

Update DAE dependencies and get running in node18

📷 Screenshots

[DAE Extension] node 18 upgrade - manual testing report

🔗 References

https://auth0team.atlassian.net/browse/IDS-5149

🎯 Testing

Monika's Manual tests:
[DAE Extension] node 18 upgrade - manual testing report

Fede's manual tests:

• Exploratory testing comparing DAE logs and webtask logs to baseline.

Logs page:

• Refresh logs (and not get new Client Credential logs every time)
• Load more logs
• See various generated logs: login, signup, enroll in MFA, unenroll

Users page:

• Search users by name
• Search users by email with wildcard
• Reset search
• Create user
• Order by Latest login and Logins (asc and desc)

User page:

• Display same user info as baseline
• Enroll user in MFA through manage dashboard and see the added MFA field
• Verify email and see EMAIL_VERIFIED: TRUE
• Actions: Block
• Actions: Unblock
• Actions: Unenroll MFA
• Actions: Re-send verification email
• Actions: Reset password
• Actions: Change email
• Actions: Change Password
• Actions: Delete User
• Devices tab shows devices
• Logs tab shows user related logs
• Clicking on a log shows more details
• Profile tab shows user JSON payload

Configuration page:

• Filter hook can be created to filter shown users with a lucene query email:dae*
• Filter hook can be cleared
• Access Hook can be created to disallow deleting users
• Access Hook can be cleared
• Write hook can be created to add some metadata to all created users
• Write hook can be cleared
• Membership hook can be created to enable membership selection and define an array of memberships. Dropdown shows in user creation dialog
• Membership hook can be cleared
• Settings query hook can be created which limits connections to manage, change UI strings with "dict", load a css sheet, limit whether the user can create users, change labels for form fields and add text localization
• Settings query hook can be cleared

All the above was tested with an admin user.

Other roles:

• User role can do everything the admin can do except access the logs and configuration pages
• Operator role can do everything the admin can do except access the configuration page
• Auditor role can only search for users and get user information

✅ This change has been tested in a Webtask

✅ This change has unit test coverage

✅ This change has integration test coverage

🚫 This change has been tested for performance

🚀 Deployment

✅ This can be deployed any time

🎡 Rollout

In order to verify that the deployment was successful we will test the new version of the extension in production with no extension gallery overrides.

🔥 Rollback

We will rollback if there are any issues with the extension

📄 Procedure

The extensions.json will be modified so the latest version of the extension is the previous one (4.4). Customers with issues will be instructed to downgrade.

🖥 Appliance

Note to reviewers: ensure that this change is compatible with the Appliance.

[Monika-Khviasko]

https://github.com/auth0-extensions/auth0-extension-express-tools/blob/69015741a2a9a6690542f6f1b1857336f419405a/src/middlewares/managementApiClient.js

[sauntimo]

I've reviewed the code and it looks good and tested the functionality in a prod tenant and it seems to be working as expected. I'm not leaving a formal review as I contributed code to the PR.

[VictorGarridoAuth0]

LGTM