feat: Add hosted domain hint when signing in through Google SSO from subdomain (#2458)

* feat: Add hosted domain hint when signing in through Google SSO from subdomain

closes #2454

server/auth/providers/google.js

@@ -10,6 +10,7 @@ import {
   GoogleWorkspaceInvalidError,
 } from "../../errors";
 import passportMiddleware from "../../middlewares/passport";
+import { AuthenticationProvider } from "../../models";
 import { getAllowedDomains } from "../../utils/authentication";
 import { StateStore } from "../../utils/passport";
 
@@ -86,13 +87,28 @@ if (GOOGLE_CLIENT_ID) {
     )
   );
 
-  router.get(
-    "google",
-    passport.authenticate(providerName, {
+  router.get("google", async (ctx) => {
+    const { authProviderId } = ctx.request.query;
+
+    if (authProviderId) {
+      ctx.assertUuid(authProviderId, "authProviderId must be a UUID");
+    }
+
+    const authProvider = authProviderId
+      ? await AuthenticationProvider.findOne({
+          where: {
+            id: authProviderId,
+            name: providerName,
+          },
+        })
+      : undefined;
+
+    return passport.authenticate(providerName, {
       accessType: "offline",
       prompt: "select_account consent",
-    })
-  );
+      hd: authProvider?.providerId,
+    })(ctx);
+  });
 
   router.get("google.callback", passportMiddleware(providerName));
 }