@@ -78,11 +78,11 @@ func IsViewerDirective(ctx context.Context, obj any, next graphql.Resolver) (any
|
|||||||
return nil, ErrForbidden
|
return nil, ErrForbidden
|
||||||
}
|
}
|
||||||
case *types.Membership:
|
case *types.Membership:
|
||||||
if identity.ID != node.IdentityID {
|
if identity.ID != node.Identity.ID {
|
||||||
return nil, ErrForbidden
|
return nil, ErrForbidden
|
||||||
}
|
}
|
||||||
case *types.Session:
|
case *types.Session:
|
||||||
if identity.ID != node.IdentityID {
|
if identity.ID != node.Identity.ID {
|
||||||
return nil, ErrForbidden
|
return nil, ErrForbidden
|
||||||
}
|
}
|
||||||
default:
|
default:
|
||||||
|
|||||||
@@ -193,11 +193,6 @@ type IdentityProfile implements Node {
|
|||||||
updatedAt: Datetime!
|
updatedAt: Datetime!
|
||||||
}
|
}
|
||||||
|
|
||||||
type CustomAttribute {
|
|
||||||
key: String!
|
|
||||||
value: String!
|
|
||||||
}
|
|
||||||
|
|
||||||
type Organization implements Node {
|
type Organization implements Node {
|
||||||
id: ID!
|
id: ID!
|
||||||
name: String!
|
name: String!
|
||||||
@@ -248,16 +243,12 @@ enum MembershipRole
|
|||||||
|
|
||||||
type Membership implements Node {
|
type Membership implements Node {
|
||||||
id: ID!
|
id: ID!
|
||||||
identityId: ID!
|
|
||||||
createdAt: Datetime!
|
createdAt: Datetime!
|
||||||
profile: IdentityProfile!
|
profile: IdentityProfile!
|
||||||
identity: Identity @goField(forceResolver: true)
|
identity: Identity @goField(forceResolver: true)
|
||||||
organization: Organization @goField(forceResolver: true)
|
organization: Organization @goField(forceResolver: true)
|
||||||
role: MembershipRole!
|
role: MembershipRole!
|
||||||
permissions: [Permission!]!
|
permissions: [Permission!]!
|
||||||
provisionedBy: ProvisioningSource!
|
|
||||||
active: Boolean!
|
|
||||||
lastSyncedAt: Datetime
|
|
||||||
|
|
||||||
lastSession: Session @goField(forceResolver: true) @isViewer
|
lastSession: Session @goField(forceResolver: true) @isViewer
|
||||||
}
|
}
|
||||||
@@ -275,7 +266,7 @@ type Invitation implements Node {
|
|||||||
|
|
||||||
type Session implements Node {
|
type Session implements Node {
|
||||||
id: ID!
|
id: ID!
|
||||||
identityId: ID!
|
identity: Identity @goField(forceResolver: true) @isViewer
|
||||||
ipAddress: String!
|
ipAddress: String!
|
||||||
userAgent: String!
|
userAgent: String!
|
||||||
updatedAt: Datetime!
|
updatedAt: Datetime!
|
||||||
@@ -315,13 +306,6 @@ type Application {
|
|||||||
availableAccessLevels: [AccessLevel!]!
|
availableAccessLevels: [AccessLevel!]!
|
||||||
}
|
}
|
||||||
|
|
||||||
type SessionPolicy {
|
|
||||||
maxSessionDurationHours: Int!
|
|
||||||
idleTimeoutMinutes: Int!
|
|
||||||
maxConcurrentSessions: Int
|
|
||||||
requireReauthForSensitiveActions: Boolean!
|
|
||||||
}
|
|
||||||
|
|
||||||
type SAMLConfiguration implements Node {
|
type SAMLConfiguration implements Node {
|
||||||
id: ID!
|
id: ID!
|
||||||
emailDomain: String!
|
emailDomain: String!
|
||||||
@@ -420,12 +404,6 @@ enum TokenScope {
|
|||||||
ADMIN
|
ADMIN
|
||||||
}
|
}
|
||||||
|
|
||||||
enum ProvisioningSource {
|
|
||||||
MANUAL
|
|
||||||
INVITATION
|
|
||||||
SAML
|
|
||||||
}
|
|
||||||
|
|
||||||
enum ReauthenticationReason {
|
enum ReauthenticationReason {
|
||||||
SESSION_EXPIRED
|
SESSION_EXPIRED
|
||||||
SENSITIVE_ACTION
|
SENSITIVE_ACTION
|
||||||
@@ -598,15 +576,6 @@ input AssumeOrganizationSessionInput {
|
|||||||
organizationId: ID!
|
organizationId: ID!
|
||||||
}
|
}
|
||||||
|
|
||||||
input DeactivateAccountInput {
|
|
||||||
password: String!
|
|
||||||
}
|
|
||||||
|
|
||||||
input DeleteAccountInput {
|
|
||||||
password: String!
|
|
||||||
confirmation: String!
|
|
||||||
}
|
|
||||||
|
|
||||||
input UpdateIdentityProfileInput {
|
input UpdateIdentityProfileInput {
|
||||||
membershipId: ID!
|
membershipId: ID!
|
||||||
displayName: String
|
displayName: String
|
||||||
@@ -664,23 +633,6 @@ input DeleteOrganizationHorizontalLogoInput {
|
|||||||
organizationId: ID!
|
organizationId: ID!
|
||||||
}
|
}
|
||||||
|
|
||||||
input SessionPolicyInput {
|
|
||||||
maxSessionDurationHours: Int
|
|
||||||
idleTimeoutMinutes: Int
|
|
||||||
maxConcurrentSessions: Int
|
|
||||||
requireReauthForSensitiveActions: Boolean
|
|
||||||
}
|
|
||||||
|
|
||||||
input AddIPAllowlistEntryInput {
|
|
||||||
organizationId: ID!
|
|
||||||
cidr: String!
|
|
||||||
description: String
|
|
||||||
}
|
|
||||||
|
|
||||||
input RemoveIPAllowlistEntryInput {
|
|
||||||
entryId: ID!
|
|
||||||
}
|
|
||||||
|
|
||||||
input InviteMemberInput {
|
input InviteMemberInput {
|
||||||
organizationId: ID!
|
organizationId: ID!
|
||||||
email: EmailAddr!
|
email: EmailAddr!
|
||||||
|
|||||||
Reference in New Issue
Block a user