rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Retrict some query and mutation to only session

Browse Source 
Signed-off-by: Bryan Frimin <bryan@probo.com>
This commit is contained in:
Bryan Frimin
2026-06-02 17:43:00 -07:00
parent 9c4b6aff18
commit 383ea5a2d4
25 changed files with 268 additions and 190 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
pkg/server/api/trust/v1/gqlgen.yaml
View File

@@ -1,5 +1,6 @@
schema:
- "graphql/*.graphql"
- "../../../gqlutils/directives/authentication/schema.graphql"
- "../../../gqlutils/directives/session/schema.graphql"
exec:

6
pkg/server/api/trust/v1/graphql/auth.graphql
View File

@@ -1,10 +1,10 @@
extend type Mutation {
sendMagicLink(input: SendMagicLinkInput!): SendMagicLinkPayload
@session(required: OPTIONAL)
@authentication(required: OPTIONAL)
verifyMagicLink(input: VerifyMagicLinkInput!): VerifyMagicLinkPayload
@session(required: OPTIONAL)
@authentication(required: OPTIONAL)
updateFullName(input: UpdateFullNameInput!): UpdateFullNamePayload
@session(required: PRESENT)
@authentication(required: PRESENT) @sessionOnly
}
input SendMagicLinkInput {

2
pkg/server/api/trust/v1/graphql/base.graphql
View File

@@ -27,7 +27,7 @@ type Query {
currentTrustCenter: TrustCenter
oidcProviders: [OIDCProviderInfo!]!
@goField(forceResolver: true)
@session(required: OPTIONAL)
@authentication(required: OPTIONAL)
}
type OIDCProviderInfo {

4
pkg/server/api/trust/v1/graphql/mailing_list.graphql
View File

@@ -42,9 +42,9 @@ type MailingListSubscriber implements Node
}
extend type Mutation {
subscribeToMailingList: SubscribeToMailingListPayload! @session(required: PRESENT)
subscribeToMailingList: SubscribeToMailingListPayload! @authentication(required: PRESENT) @sessionOnly
unsubscribeFromMailingList: UnsubscribeFromMailingListPayload! @session(required: PRESENT)
unsubscribeFromMailingList: UnsubscribeFromMailingListPayload! @authentication(required: PRESENT) @sessionOnly
}
type SubscribeToMailingListPayload {

4
pkg/server/api/trust/v1/graphql/nda.graphql
View File

@@ -124,11 +124,11 @@ type ElectronicSignature implements Node {
extend type Mutation {
acceptElectronicSignature(
input: AcceptElectronicSignatureInput!
): AcceptElectronicSignaturePayload @session(required: PRESENT)
): AcceptElectronicSignaturePayload @authentication(required: PRESENT) @sessionOnly
recordSigningEvent(
input: RecordSigningEventInput!
): RecordSigningEventPayload @session(required: PRESENT)
): RecordSigningEventPayload @authentication(required: PRESENT) @sessionOnly
}
input AcceptElectronicSignatureInput {

14
pkg/server/api/trust/v1/graphql/trust_center.graphql
View File

@@ -346,29 +346,29 @@ type DocumentAccess implements Node {
}
extend type Mutation {
requestAllAccesses: RequestAccessesPayload! @session(required: PRESENT) @nda
requestAllAccesses: RequestAccessesPayload! @authentication(required: PRESENT) @nda
exportDocumentPDF(input: ExportDocumentPDFInput!): ExportDocumentPDFPayload!
@session(required: OPTIONAL) @nda
@authentication(required: OPTIONAL) @nda
exportReportPDF(input: ExportReportPDFInput!): ExportReportPDFPayload!
@session(required: OPTIONAL) @nda
@authentication(required: OPTIONAL) @nda
exportTrustCenterFile(
input: ExportTrustCenterFileInput!
): ExportTrustCenterFilePayload! @session(required: OPTIONAL) @nda
): ExportTrustCenterFilePayload! @authentication(required: OPTIONAL) @nda
requestDocumentAccess(
input: RequestDocumentAccessInput!
): RequestDocumentAccessPayload! @session(required: PRESENT) @nda
): RequestDocumentAccessPayload! @authentication(required: PRESENT) @nda
requestReportAccess(
input: RequestReportAccessInput!
): RequestReportAccessPayload! @session(required: PRESENT) @nda
): RequestReportAccessPayload! @authentication(required: PRESENT) @nda
requestTrustCenterFileAccess(
input: RequestTrustCenterFileAccessInput!
): RequestFileAccessPayload! @session(required: PRESENT) @nda
): RequestFileAccessPayload! @authentication(required: PRESENT) @nda
}
type RequestDocumentAccessPayload {

6
pkg/server/api/trust/v1/graphql_handler.go
View File

@@ -26,6 +26,7 @@ import (
"go.probo.inc/probo/pkg/server/api/authn"
"go.probo.inc/probo/pkg/server/api/trust/v1/schema"
"go.probo.inc/probo/pkg/server/gqlutils"
"go.probo.inc/probo/pkg/server/gqlutils/directives/authentication"
"go.probo.inc/probo/pkg/server/gqlutils/directives/session"
"go.probo.inc/probo/pkg/trust"
)
@@ -42,8 +43,9 @@ func NewGraphQLHandler(iamSvc *iam.Service, trustSvc *trust.Service, esignSvc *e
sessionCookie: authn.NewCookie(&cookieConfig),
},
Directives: schema.DirectiveRoot{
Nda: newNDADirective(logger, trustSvc, esignSvc),
Session: session.Directive,
Nda: newNDADirective(logger, trustSvc, esignSvc),
Authentication: authentication.Directive,
SessionOnly: session.Directive,
},
}