rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Retrict some query and mutation to only session

Browse Source 
Signed-off-by: Bryan Frimin <bryan@probo.com>
This commit is contained in:
Bryan Frimin
2026-06-02 17:43:00 -07:00
parent 9c4b6aff18
commit 383ea5a2d4
25 changed files with 268 additions and 190 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
pkg/server/api/connect/v1/graphql/audit_log.graphql
View File

@@ -54,7 +54,7 @@ type AuditLogEntry implements Node {
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
}
type AuditLogEntryConnection

10
pkg/server/api/connect/v1/graphql/base.graphql
View File

@@ -21,17 +21,17 @@ interface Node {
}
type Query {
node(id: ID!): Node @session(required: PRESENT)
viewer: Identity @session(required: PRESENT)
node(id: ID!): Node @authentication(required: PRESENT)
viewer: Identity @authentication(required: PRESENT)
ssoLoginURL(email: EmailAddr!): String
@goField(forceResolver: true)
@session(required: OPTIONAL)
@authentication(required: OPTIONAL)
oidcProviders: [OIDCProviderInfo!]!
@goField(forceResolver: true)
@session(required: OPTIONAL)
@authentication(required: OPTIONAL)
signUpEnabled: Boolean!
@goField(forceResolver: true)
@session(required: OPTIONAL)
@authentication(required: OPTIONAL)
}
type OIDCProviderInfo {

13
pkg/server/api/connect/v1/graphql/identity.graphql
View File

@@ -28,17 +28,22 @@ type Identity implements Node {
after: CursorKey
last: Int
before: CursorKey
): PersonalAPIKeyConnection @goField(forceResolver: true)
): PersonalAPIKeyConnection
@goField(forceResolver: true)
@authentication(required: PRESENT)
@sessionOnly
invitingOrganizations: [Organization!]!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
@sessionOnly
ssoLoginURL: String
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
@sessionOnly
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
}

4
pkg/server/api/connect/v1/graphql/invitation.graphql
View File

@@ -7,7 +7,7 @@ type Invitation implements Node {
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
}
enum InvitationStatus
@@ -51,7 +51,7 @@ type InvitationEdge {
extend type Mutation {
inviteUser(input: InviteUserInput!): InviteUserPayload
@session(required: PRESENT)
@authentication(required: PRESENT)
}
input InviteUserInput {

2
pkg/server/api/connect/v1/graphql/membership.graphql
View File

@@ -18,7 +18,7 @@ type Membership implements Node {
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
}
extend type Mutation {

4
pkg/server/api/connect/v1/graphql/oauth2.graphql
View File

@@ -1,11 +1,11 @@
extend type Mutation {
authorizeDevice(
input: AuthorizeDeviceInput!
): AuthorizeDevicePayload @session(required: PRESENT)
): AuthorizeDevicePayload @authentication(required: PRESENT) @sessionOnly
approveConsent(
input: ApproveConsentInput!
): ApproveConsentPayload @session(required: PRESENT)
): ApproveConsentPayload @authentication(required: PRESENT) @sessionOnly
}

10
pkg/server/api/connect/v1/graphql/organization.graphql
View File

@@ -41,22 +41,22 @@ type Organization implements Node {
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
}
extend type Mutation {
createOrganization(
input: CreateOrganizationInput!
): CreateOrganizationPayload @session(required: PRESENT)
): CreateOrganizationPayload @authentication(required: PRESENT)
updateOrganization(
input: UpdateOrganizationInput!
): UpdateOrganizationPayload @session(required: PRESENT)
): UpdateOrganizationPayload @authentication(required: PRESENT)
deleteOrganization(
input: DeleteOrganizationInput!
): DeleteOrganizationPayload @session(required: PRESENT)
): DeleteOrganizationPayload @authentication(required: PRESENT)
deleteOrganizationHorizontalLogo(
input: DeleteOrganizationHorizontalLogoInput!
): DeleteOrganizationHorizontalLogoPayload @session(required: PRESENT)
): DeleteOrganizationHorizontalLogoPayload @authentication(required: PRESENT)
}
input CreateOrganizationInput {

16
pkg/server/api/connect/v1/graphql/personal_api_key.graphql
View File

@@ -5,11 +5,15 @@ type PersonalAPIKey implements Node {
lastUsedAt: Datetime
createdAt: Datetime!
token: String @goField(forceResolver: true)
token: String
@goField(forceResolver: true)
@authentication(required: PRESENT)
@sessionOnly
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
@sessionOnly
}
type PersonalAPIKeyConnection
@@ -29,10 +33,14 @@ type PersonalAPIKeyEdge {
extend type Mutation {
createPersonalAPIKey(
input: CreatePersonalAPIKeyInput!
): CreatePersonalAPIKeyPayload @session(required: PRESENT)
): CreatePersonalAPIKeyPayload
@authentication(required: PRESENT)
@sessionOnly
revokePersonalAPIKey(
input: RevokePersonalAPIKeyInput!
): RevokePersonalAPIKeyPayload @session(required: PRESENT)
): RevokePersonalAPIKeyPayload
@authentication(required: PRESENT)
@sessionOnly
}
input CreatePersonalAPIKeyInput {

8
pkg/server/api/connect/v1/graphql/profile.graphql
View File

@@ -25,7 +25,7 @@ type Profile implements Node {
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
}
enum ProfileState
@@ -97,13 +97,13 @@ type ProfileEdge {
extend type Mutation {
createUser(input: CreateUserInput!): CreateUserPayload
@session(required: PRESENT)
@authentication(required: PRESENT)
deactivateUser(input: DeactivateUserInput!): DeactivateUserPayload
updateUser(input: UpdateUserInput!): UpdateUserPayload!
archiveUser(input: ArchiveUserInput!): ArchiveUserPayload
@session(required: PRESENT)
@authentication(required: PRESENT)
removeUser(input: RemoveUserInput!): RemoveUserPayload
@session(required: PRESENT)
@authentication(required: PRESENT)
}
input CreateUserInput {

8
pkg/server/api/connect/v1/graphql/saml.graphql
View File

@@ -15,7 +15,7 @@ type SAMLConfiguration implements Node {
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
}
type SAMLAttributeMappings {
@@ -55,13 +55,13 @@ type SAMLConfigurationEdge {
extend type Mutation {
createSAMLConfiguration(
input: CreateSAMLConfigurationInput!
): CreateSAMLConfigurationPayload @session(required: PRESENT)
): CreateSAMLConfigurationPayload @authentication(required: PRESENT) @sessionOnly
updateSAMLConfiguration(
input: UpdateSAMLConfigurationInput!
): UpdateSAMLConfigurationPayload @session(required: PRESENT)
): UpdateSAMLConfigurationPayload @authentication(required: PRESENT) @sessionOnly
deleteSAMLConfiguration(
input: DeleteSAMLConfigurationInput!
): DeleteSAMLConfigurationPayload @session(required: PRESENT)
): DeleteSAMLConfigurationPayload @authentication(required: PRESENT) @sessionOnly
}
input CreateSAMLConfigurationInput {

16
pkg/server/api/connect/v1/graphql/scim.graphql
View File

@@ -17,7 +17,7 @@ type SCIMConfiguration implements Node {
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
}
type SCIMBridge implements Node {
@@ -33,7 +33,7 @@ type SCIMBridge implements Node {
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
}
type Connector implements Node {
@@ -44,7 +44,7 @@ type Connector implements Node {
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
}
enum ConnectorProvider
@@ -94,7 +94,7 @@ type SCIMEvent implements Node {
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
}
enum SCIMEventOrderField
@@ -130,16 +130,16 @@ type SCIMEventEdge {
extend type Mutation {
createSCIMConfiguration(
input: CreateSCIMConfigurationInput!
): CreateSCIMConfigurationPayload @session(required: PRESENT)
): CreateSCIMConfigurationPayload @authentication(required: PRESENT) @sessionOnly
deleteSCIMConfiguration(
input: DeleteSCIMConfigurationInput!
): DeleteSCIMConfigurationPayload @session(required: PRESENT)
): DeleteSCIMConfigurationPayload @authentication(required: PRESENT) @sessionOnly
regenerateSCIMToken(
input: RegenerateSCIMTokenInput!
): RegenerateSCIMTokenPayload @session(required: PRESENT)
): RegenerateSCIMTokenPayload @authentication(required: PRESENT) @sessionOnly
updateSCIMBridge(
input: UpdateSCIMBridgeInput!
): UpdateSCIMBridgePayload @session(required: PRESENT)
): UpdateSCIMBridgePayload @authentication(required: PRESENT)
}
input CreateSCIMConfigurationInput {

26
pkg/server/api/connect/v1/graphql/session.graphql
View File

@@ -5,29 +5,29 @@ enum ReauthenticationReason {
}
extend type Mutation {
signIn(input: SignInInput!): SignInPayload @session(required: OPTIONAL)
signUp(input: SignUpInput!): SignUpPayload @session(required: NONE)
signOut: SignOutPayload @session(required: PRESENT)
signIn(input: SignInInput!): SignInPayload @authentication(required: OPTIONAL)
signUp(input: SignUpInput!): SignUpPayload @authentication(required: NONE)
signOut: SignOutPayload @authentication(required: PRESENT) @sessionOnly
activateAccount(
input: ActivateAccountInput!
): ActivateAccountPayload @session(required: OPTIONAL)
): ActivateAccountPayload @authentication(required: OPTIONAL)
forgotPassword(input: ForgotPasswordInput!): ForgotPasswordPayload
@session(required: NONE)
@authentication(required: NONE)
resetPassword(input: ResetPasswordInput!): ResetPasswordPayload
@session(required: NONE)
@authentication(required: NONE)
verifyEmail(input: VerifyEmailInput!): VerifyEmailPayload
@session(required: OPTIONAL)
@authentication(required: OPTIONAL)
changePassword(input: ChangePasswordInput!): ChangePasswordPayload
@session(required: PRESENT)
@authentication(required: PRESENT) @sessionOnly
changeEmail(input: ChangeEmailInput!): ChangeEmailPayload
@session(required: PRESENT)
@authentication(required: PRESENT) @sessionOnly
assumeOrganizationSession(
input: AssumeOrganizationSessionInput!
): AssumeOrganizationSessionPayload @session(required: PRESENT)
): AssumeOrganizationSessionPayload @authentication(required: PRESENT) @sessionOnly
revokeSession(input: RevokeSessionInput!): RevokeSessionPayload!
@session(required: PRESENT)
revokeAllSessions: RevokeAllSessionsPayload @session(required: PRESENT)
@authentication(required: PRESENT) @sessionOnly
revokeAllSessions: RevokeAllSessionsPayload @authentication(required: PRESENT) @sessionOnly
}
enum SessionOrderField
@@ -56,7 +56,7 @@ type Session implements Node {
permission(action: String!): Boolean!
@goField(forceResolver: true)
@session(required: PRESENT)
@authentication(required: PRESENT)
}
type SessionConnection