Preserve sso context in authentication event deserialisation

The Events API includes an sso object (with connection_id,
organization_id, and optionally session_id) in authentication.sso_*
event data, but the deserialiser was silently dropping it.

Adds AuthenticationEventSso and AuthenticationEventSsoResponse
interfaces, and a deserializeAuthenticationEventSso helper that
follows the existing deserializeOauthTokens pattern for nested
optional objects with snake_case conversion.

Author: smorimoto

src/user-management/interfaces/authentication-event.interface.ts

@@ -3,6 +3,18 @@ interface AuthenticationEventError {
   message: string;
 }
 
+export interface AuthenticationEventSso {
+  connectionId: string;
+  organizationId: string;
+  sessionId?: string;
+}
+
+export interface AuthenticationEventSsoResponse {
+  connection_id: string;
+  organization_id: string;
+  session_id?: string;
+}
+
 type AuthenticationEventType =
   | 'sso'
   | 'password'
@@ -17,6 +29,7 @@ export type AuthenticationEvent = {
   email: string | null;
   error?: AuthenticationEventError;
   ipAddress: string | null;
+  sso?: AuthenticationEventSso;
   status: AuthenticationEventStatus;
   type: AuthenticationEventType;
   userAgent: string | null;
@@ -27,6 +40,7 @@ export interface AuthenticationEventResponse {
   email: string | null;
   error?: AuthenticationEventError;
   ip_address: string | null;
+  sso?: AuthenticationEventSsoResponse;
   status: AuthenticationEventStatus;
   type: AuthenticationEventType;
   user_agent: string | null;

src/user-management/serializers/authentication-event.serializer.ts

@@ -1,14 +1,27 @@
 import {
   AuthenticationEvent,
   AuthenticationEventResponse,
+  AuthenticationEventSso,
+  AuthenticationEventSsoResponse,
 } from '../interfaces';
 
+const deserializeAuthenticationEventSso = (
+  sso: AuthenticationEventSsoResponse,
+): AuthenticationEventSso => ({
+  connectionId: sso.connection_id,
+  organizationId: sso.organization_id,
+  ...(sso.session_id && { sessionId: sso.session_id }),
+});
+
 export const deserializeAuthenticationEvent = (
   authenticationEvent: AuthenticationEventResponse,
 ): AuthenticationEvent => ({
   email: authenticationEvent.email,
   error: authenticationEvent.error,
   ipAddress: authenticationEvent.ip_address,
+  ...(authenticationEvent.sso && {
+    sso: deserializeAuthenticationEventSso(authenticationEvent.sso),
+  }),
   status: authenticationEvent.status,
   type: authenticationEvent.type,
   userAgent: authenticationEvent.user_agent,