add a flag in loginOauth function to skip setup tkey

[himanshuchawla009]

• This can be used to migrate sfa keys to mpc without multiple logins
• We need to make sure that setupTkey and importTssKey function is secure enough to not allow imports from unauthenticated users

[ieow]

Recommended flow to support migration

1. Dev maintain DB tracking migrated user after user click on button to migrate

• Create a button for migrate from sfa to mpc. accessible after user login in to sfa
  • retrieve sfa final key
  • login in to mpc with sfa key as importTssKey ( using mpc sdk)
  • delete sfa Final key from sfa sdk
• save migrated user to DB ( done by dev)
• on next user login, check DB if user is migrated,
  • Yes, proceed login with mpc sdk
  • No, proceed login with sfa sdk

2. Force User to migrate on login

• Split mpc login function to login and setupKey. Check for newUser in between the flow
  • login with jwt/oauth
  • check corekitStatus ( will return newUser or existing User )
    • newUser - prompt user for migration, make user login again with sfa
      - using sfa key continue setupKey and provide sfa key as importTssKey
    • existingUser - continue setupKey flow