WIP

Signed-off-by: Bryan Frimin <bryan@getprobo.com>

pkg/server/api/connect/v1/saml_handler.go

@@ -90,9 +90,9 @@ func (h *SAMLHandler) ConsumeHandler(w http.ResponseWriter, r *http.Request) {
 		}
 	}
 
-	_, _, err = h.iam.SessionService.AssumeOrganizationSession(ctx, rootSession.ID, membership.OrganizationID)
+	_, _, err = h.iam.SessionService.OpenSAMLChildSessionForOrganization(ctx, rootSession.ID, membership.OrganizationID)
 	if err != nil {
-		h.logger.ErrorCtx(ctx, "cannot assume organization session", log.Error(err))
+		h.logger.ErrorCtx(ctx, "cannot open SAML child session", log.Error(err))
 		h.renderInternalServerError(w, r)
 		return
 	}

pkg/server/api/connect/v1/v1_resolver.go

@@ -319,6 +319,8 @@ func (r *membershipConnectionResolver) TotalCount(ctx context.Context, obj *type
 
 // SignIn is the resolver for the signIn field.
 func (r *mutationResolver) SignIn(ctx context.Context, input types.SignInInput) (*types.SignInPayload, error) {
+	// TODO: handle existing session to only open child session and chnage root session auth method to PASSWORD
+
 	user, session, err := r.iam.AuthService.OpenSessionWithPassword(ctx, input.Email, input.Password)
 	if err != nil {
 		var ErrInvalidCredentials *iam.ErrInvalidCredentials