Fix chi middleware panic in trust API mux

The session-transfer route was registered before the session and member
provisioning middlewares, causing chi to panic with "all middlewares must
be defined before routes on a mux". Scope the middlewares to the graphql
route using r.Group so session-transfer remains unauthenticated.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

pkg/server/api/trust/v1/resolver.go

@@ -96,11 +96,14 @@ func NewMux(
 	)
 	r.Method(http.MethodGet, "/session-transfer", sessionTransferHandler)
 
-	r.Use(authn.NewSessionMiddleware(iamSvc, cookieConfig))
-	r.Use(compliancepage.NewMemberProvisioningMiddleware(trustSvc, logger))
-
 	graphqlHandler := NewGraphQLHandler(iamSvc, trustSvc, esignSvc, mailmanSvc, logger, baseURL, cookieConfig, tokenSecret)
-	r.Handle("/graphql", graphqlHandler)
+	r.Group(
+		func(r chi.Router) {
+			r.Use(authn.NewSessionMiddleware(iamSvc, cookieConfig))
+			r.Use(compliancepage.NewMemberProvisioningMiddleware(trustSvc, logger))
+			r.Handle("/graphql", graphqlHandler)
+		},
+	)
 
 	return r
 }