Plug trust center part 1

Signed-off-by: Émile Ré <emile@getprobo.com>

pkg/server/api/console/v1/graphql_handler.go

@@ -32,6 +32,7 @@ func NewGraphQLHandler(iamSvc *iam.Service, proboSvc *probo.Service, customDomai
 			probo:             proboSvc,
 			iam:               iamSvc,
 			customDomainCname: customDomainCname,
+			logger:            logger,
 		},
 	}
 

pkg/server/api/console/v1/resolver.go

@@ -46,6 +46,7 @@ type (
 		authorize         authz.AuthorizeFunc
 		probo             *probo.Service
 		iam               *iam.Service
+		logger            *log.Logger
 		customDomainCname string
 	}
 )
@@ -97,7 +98,10 @@ func NewMux(
 			}
 
 			w.WriteHeader(http.StatusOK)
-			json.NewEncoder(w).Encode(requests)
+			if err := json.NewEncoder(w).Encode(requests); err != nil {
+				http.Error(w, err.Error(), http.StatusInternalServerError)
+				return
+			}
 		},
 	)
 
@@ -151,7 +155,7 @@ func NewMux(
 			w.Header().Set("Content-Type", "application/pdf")
 			w.Header().Set("Content-Disposition", fmt.Sprintf("inline; filename=\"%s.pdf\"", uuid.String()))
 			w.WriteHeader(http.StatusOK)
-			w.Write(pdfData)
+			_, _ = w.Write(pdfData)
 		},
 	)
 

pkg/server/api/console/v1/types/audit.go

@@ -60,7 +60,7 @@ func NewAuditEdge(a *coredata.Audit, orderField coredata.AuditOrderField) *Audit
 }
 
 func NewAudit(a *coredata.Audit) *Audit {
-	return &Audit{
+	node := &Audit{
 		ID: a.ID,
 		Organization: &Organization{
 			ID: a.OrganizationID,
@@ -76,4 +76,12 @@ func NewAudit(a *coredata.Audit) *Audit {
 		CreatedAt:             a.CreatedAt,
 		UpdatedAt:             a.UpdatedAt,
 	}
+
+	if a.ReportID != nil {
+		node.Report = &Report{
+			ID: *a.ReportID,
+		}
+	}
+
+	return node
 }

pkg/server/api/console/v1/v1_resolver.go

@@ -14,6 +14,7 @@ import (
 	"time"
 
 	pgx "github.com/jackc/pgx/v5"
+	"go.gearno.de/kit/log"
 	"go.probo.inc/probo/pkg/coredata"
 	"go.probo.inc/probo/pkg/gid"
 	"go.probo.inc/probo/pkg/iam"
@@ -1674,12 +1675,28 @@ func (r *mutationResolver) CreateTrustCenterAccess(ctx context.Context, input ty
 
 	prb := r.ProboService(ctx, input.TrustCenterID.TenantID())
 
+	// TODO: when admin/owner creates trust center access, we should have an invite for it instead of directly creating the identity
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		var err error
+		identity, err = r.iam.AuthService.LoadOrCreateIdentity(
+			ctx,
+			&iam.LoadOrCreateIdentityRequest{
+				Email: input.Email,
+			},
+		)
+		if err != nil {
+			r.logger.ErrorCtx(ctx, "cannot load or create identity", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+	}
+
 	access, err := prb.TrustCenterAccesses.Create(
 		ctx,
 		&probo.CreateTrustCenterAccessRequest{
 			TrustCenterID: input.TrustCenterID,
-			Email:         input.Email,
-			Name:          input.Name,
+			Email:         identity.EmailAddress,
+			FullName:      identity.FullName,
 		},
 	)
 	if err != nil {
@@ -1687,8 +1704,8 @@ func (r *mutationResolver) CreateTrustCenterAccess(ctx context.Context, input ty
 			return nil, gqlutils.Conflict(ctx, err)
 		}
 
-		// TODO no panic use gqlutils.InternalError
-		panic(fmt.Errorf("cannot create trust center access: %w", err))
+		r.logger.ErrorCtx(ctx, "cannot create trust center access", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
 	}
 
 	return &types.CreateTrustCenterAccessPayload{