Retrict some query and mutation to only session

Signed-off-by: Bryan Frimin <bryan@probo.com>
2026-06-02 17:43:00 -07:00
parent 9c4b6aff18
commit 383ea5a2d4
25 changed files with 268 additions and 190 deletions
--- a/pkg/server/api/connect/v1/graphql/oauth2.graphql
+++ b/pkg/server/api/connect/v1/graphql/oauth2.graphql
@@ -1,11 +1,11 @@
 extend type Mutation {
  authorizeDevice(
    input: AuthorizeDeviceInput!
-  ): AuthorizeDevicePayload @session(required: PRESENT)
+  ): AuthorizeDevicePayload @authentication(required: PRESENT) @sessionOnly

  approveConsent(
    input: ApproveConsentInput!
-  ): ApproveConsentPayload @session(required: PRESENT)
+  ): ApproveConsentPayload @authentication(required: PRESENT) @sessionOnly
 }