Implement continue on verify magic link

Signed-off-by: Émile Ré <emile@getprobo.com>

pkg/server/api/trust/v1/v1_resolver.go

@@ -157,11 +157,22 @@ func (r *frameworkResolver) DarkLogoURL(ctx context.Context, obj *types.Framewor
 func (r *mutationResolver) SendMagicLink(ctx context.Context, input types.SendMagicLinkInput) (*types.SendMagicLinkPayload, error) {
 	trustCenter := compliancepage.CompliancePageFromContext(ctx)
 
+	var continueURLString *string
+	if input.Continue != nil {
+		safeURL, ok := r.safeRedirect.Validate(*input.Continue)
+		if !ok {
+			return nil, gqlutils.Invalidf(ctx, "invalid continue URL")
+		}
+
+		continueURLString = &safeURL
+	}
+
 	req := &iam.SendMagicLinkRequest{
 		Email:            input.Email,
 		CompliancePageID: &trustCenter.ID,
 		OrganizationID:   trustCenter.OrganizationID,
 		URLPath:          "verify-magic-link",
+		Continue:         continueURLString,
 	}
 
 	if err := r.iam.AuthService.SendMagicLink(ctx, req); err != nil {
@@ -174,7 +185,7 @@ func (r *mutationResolver) SendMagicLink(ctx context.Context, input types.SendMa
 
 // VerifyMagicLink is the resolver for the verifyMagicLink field.
 func (r *mutationResolver) VerifyMagicLink(ctx context.Context, input types.VerifyMagicLinkInput) (*types.VerifyMagicLinkPayload, error) {
-	identity, session, err := r.iam.AuthService.OpenSessionWithMagicLink(ctx, input.Token)
+	identity, session, continueURL, err := r.iam.AuthService.OpenSessionWithMagicLink(ctx, input.Token)
 	if err != nil {
 		var errInvalidToken *iam.ErrInvalidToken
 		if errors.As(err, &errInvalidToken) {
@@ -196,7 +207,7 @@ func (r *mutationResolver) VerifyMagicLink(ctx context.Context, input types.Veri
 	r.sessionCookie.Set(w, session)
 
 	return &types.VerifyMagicLinkPayload{
-		Success: true,
+		Continue: continueURL,
 	}, nil
 }