@@ -78,11 +78,11 @@ func IsViewerDirective(ctx context.Context, obj any, next graphql.Resolver) (any
|
||||
return nil, ErrForbidden
|
||||
}
|
||||
case *types.Membership:
|
||||
if identity.ID != node.IdentityID {
|
||||
if identity.ID != node.Identity.ID {
|
||||
return nil, ErrForbidden
|
||||
}
|
||||
case *types.Session:
|
||||
if identity.ID != node.IdentityID {
|
||||
if identity.ID != node.Identity.ID {
|
||||
return nil, ErrForbidden
|
||||
}
|
||||
default:
|
||||
|
||||
@@ -193,11 +193,6 @@ type IdentityProfile implements Node {
|
||||
updatedAt: Datetime!
|
||||
}
|
||||
|
||||
type CustomAttribute {
|
||||
key: String!
|
||||
value: String!
|
||||
}
|
||||
|
||||
type Organization implements Node {
|
||||
id: ID!
|
||||
name: String!
|
||||
@@ -248,16 +243,12 @@ enum MembershipRole
|
||||
|
||||
type Membership implements Node {
|
||||
id: ID!
|
||||
identityId: ID!
|
||||
createdAt: Datetime!
|
||||
profile: IdentityProfile!
|
||||
identity: Identity @goField(forceResolver: true)
|
||||
organization: Organization @goField(forceResolver: true)
|
||||
role: MembershipRole!
|
||||
permissions: [Permission!]!
|
||||
provisionedBy: ProvisioningSource!
|
||||
active: Boolean!
|
||||
lastSyncedAt: Datetime
|
||||
|
||||
lastSession: Session @goField(forceResolver: true) @isViewer
|
||||
}
|
||||
@@ -275,7 +266,7 @@ type Invitation implements Node {
|
||||
|
||||
type Session implements Node {
|
||||
id: ID!
|
||||
identityId: ID!
|
||||
identity: Identity @goField(forceResolver: true) @isViewer
|
||||
ipAddress: String!
|
||||
userAgent: String!
|
||||
updatedAt: Datetime!
|
||||
@@ -315,13 +306,6 @@ type Application {
|
||||
availableAccessLevels: [AccessLevel!]!
|
||||
}
|
||||
|
||||
type SessionPolicy {
|
||||
maxSessionDurationHours: Int!
|
||||
idleTimeoutMinutes: Int!
|
||||
maxConcurrentSessions: Int
|
||||
requireReauthForSensitiveActions: Boolean!
|
||||
}
|
||||
|
||||
type SAMLConfiguration implements Node {
|
||||
id: ID!
|
||||
emailDomain: String!
|
||||
@@ -420,12 +404,6 @@ enum TokenScope {
|
||||
ADMIN
|
||||
}
|
||||
|
||||
enum ProvisioningSource {
|
||||
MANUAL
|
||||
INVITATION
|
||||
SAML
|
||||
}
|
||||
|
||||
enum ReauthenticationReason {
|
||||
SESSION_EXPIRED
|
||||
SENSITIVE_ACTION
|
||||
@@ -598,15 +576,6 @@ input AssumeOrganizationSessionInput {
|
||||
organizationId: ID!
|
||||
}
|
||||
|
||||
input DeactivateAccountInput {
|
||||
password: String!
|
||||
}
|
||||
|
||||
input DeleteAccountInput {
|
||||
password: String!
|
||||
confirmation: String!
|
||||
}
|
||||
|
||||
input UpdateIdentityProfileInput {
|
||||
membershipId: ID!
|
||||
displayName: String
|
||||
@@ -664,23 +633,6 @@ input DeleteOrganizationHorizontalLogoInput {
|
||||
organizationId: ID!
|
||||
}
|
||||
|
||||
input SessionPolicyInput {
|
||||
maxSessionDurationHours: Int
|
||||
idleTimeoutMinutes: Int
|
||||
maxConcurrentSessions: Int
|
||||
requireReauthForSensitiveActions: Boolean
|
||||
}
|
||||
|
||||
input AddIPAllowlistEntryInput {
|
||||
organizationId: ID!
|
||||
cidr: String!
|
||||
description: String
|
||||
}
|
||||
|
||||
input RemoveIPAllowlistEntryInput {
|
||||
entryId: ID!
|
||||
}
|
||||
|
||||
input InviteMemberInput {
|
||||
organizationId: ID!
|
||||
email: EmailAddr!
|
||||
|
||||
Reference in New Issue
Block a user