feat(auth): support reverse-proxy driven proxy auth

Closes HP-353.

tests/unit/auth/create-auth.ts

@@ -3,12 +3,28 @@ import { migrate } from "drizzle-orm/node-sqlite/migrator";
 
 import { createAuthService } from "~/server/web/auth";
 
-export function createTestAuth() {
+export function createTestAuth(
+  options: {
+    headscaleApiKey?: string;
+    proxyAuth?: {
+      enabled: boolean;
+      allowedCidrs?: string[];
+      trustedProxyCidrs?: string[];
+      ipHeader?: string;
+      userHeader?: string;
+      emailHeader?: string;
+      nameHeader?: string;
+      pictureHeader?: string;
+    };
+  } = {},
+) {
   const db = drizzle(":memory:");
   migrate(db, { migrationsFolder: "./drizzle" });
 
   const auth = createAuthService({
     secret: "test-secret-key-for-unit-tests",
+    headscaleApiKey: options.headscaleApiKey,
+    proxyAuth: options.proxyAuth,
     db,
     cookie: {
       name: "_hp_test",