masks-server 0.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (816) hide show
  1. checksums.yaml +7 -0
  2. data/app/controllers/concerns/masks/server/client_authentication.rb +65 -0
  3. data/app/controllers/concerns/masks/server/holds_login.rb +49 -0
  4. data/app/controllers/concerns/masks/server/manage_endpoint.rb +34 -0
  5. data/app/controllers/concerns/masks/server/rack_oauth2_endpoint.rb +45 -0
  6. data/app/controllers/concerns/masks/server/resource_token.rb +145 -0
  7. data/app/controllers/concerns/masks/server/saml_farewells.rb +53 -0
  8. data/app/controllers/concerns/masks/server/scim_endpoint.rb +100 -0
  9. data/app/controllers/concerns/masks/server/serves_pictures.rb +27 -0
  10. data/app/controllers/concerns/masks/server/token_presented.rb +47 -0
  11. data/app/controllers/masks/server/account_controller.rb +73 -0
  12. data/app/controllers/masks/server/account_exports_controller.rb +25 -0
  13. data/app/controllers/masks/server/addresses_controller.rb +78 -0
  14. data/app/controllers/masks/server/application_controller.rb +322 -0
  15. data/app/controllers/masks/server/apps_controller.rb +37 -0
  16. data/app/controllers/masks/server/authenticator_apps_controller.rb +53 -0
  17. data/app/controllers/masks/server/authorize_controller.rb +197 -0
  18. data/app/controllers/masks/server/avatars_controller.rb +118 -0
  19. data/app/controllers/masks/server/backup_codes_controller.rb +29 -0
  20. data/app/controllers/masks/server/client_logos_controller.rb +22 -0
  21. data/app/controllers/masks/server/code_factors_controller.rb +38 -0
  22. data/app/controllers/masks/server/connections_controller.rb +43 -0
  23. data/app/controllers/masks/server/delegations_controller.rb +24 -0
  24. data/app/controllers/masks/server/device_authorizations_controller.rb +74 -0
  25. data/app/controllers/masks/server/device_verifications_controller.rb +78 -0
  26. data/app/controllers/masks/server/devices_controller.rb +50 -0
  27. data/app/controllers/masks/server/discovery_controller.rb +18 -0
  28. data/app/controllers/masks/server/forward_auth_controller.rb +90 -0
  29. data/app/controllers/masks/server/handshakes_controller.rb +178 -0
  30. data/app/controllers/masks/server/introspections_controller.rb +51 -0
  31. data/app/controllers/masks/server/links_controller.rb +41 -0
  32. data/app/controllers/masks/server/logins_controller.rb +239 -0
  33. data/app/controllers/masks/server/manage/exports_controller.rb +22 -0
  34. data/app/controllers/masks/server/manage/graphql_controller.rb +70 -0
  35. data/app/controllers/masks/server/manage_controller.rb +19 -0
  36. data/app/controllers/masks/server/notifications_controller.rb +23 -0
  37. data/app/controllers/masks/server/organization_members_controller.rb +118 -0
  38. data/app/controllers/masks/server/passkeys_controller.rb +80 -0
  39. data/app/controllers/masks/server/passwords_controller.rb +67 -0
  40. data/app/controllers/masks/server/profiles_controller.rb +34 -0
  41. data/app/controllers/masks/server/provider_metadata_controller.rb +13 -0
  42. data/app/controllers/masks/server/pushed_authorizations_controller.rb +69 -0
  43. data/app/controllers/masks/server/received_signals_controller.rb +19 -0
  44. data/app/controllers/masks/server/registrations_controller.rb +137 -0
  45. data/app/controllers/masks/server/revocations_controller.rb +33 -0
  46. data/app/controllers/masks/server/saml_controller.rb +195 -0
  47. data/app/controllers/masks/server/scim/groups_controller.rb +157 -0
  48. data/app/controllers/masks/server/scim/metadata_controller.rb +123 -0
  49. data/app/controllers/masks/server/scim/users_controller.rb +128 -0
  50. data/app/controllers/masks/server/sessions_controller.rb +60 -0
  51. data/app/controllers/masks/server/sign_in_approvals_controller.rb +48 -0
  52. data/app/controllers/masks/server/signal_streams_controller.rb +162 -0
  53. data/app/controllers/masks/server/tenant_logos_controller.rb +21 -0
  54. data/app/controllers/masks/server/themes_controller.rb +21 -0
  55. data/app/controllers/masks/server/tokens_controller.rb +360 -0
  56. data/app/controllers/masks/server/userinfo_controller.rb +30 -0
  57. data/app/controllers/masks/server/verifications_controller.rb +32 -0
  58. data/app/graphql/masks/server/manage/mutations/activate_signing_key.rb +26 -0
  59. data/app/graphql/masks/server/manage/mutations/add_app.rb +64 -0
  60. data/app/graphql/masks/server/manage/mutations/add_group_member.rb +25 -0
  61. data/app/graphql/masks/server/manage/mutations/add_member.rb +36 -0
  62. data/app/graphql/masks/server/manage/mutations/approve_actor.rb +25 -0
  63. data/app/graphql/masks/server/manage/mutations/archive_client.rb +30 -0
  64. data/app/graphql/masks/server/manage/mutations/archive_event_stream.rb +28 -0
  65. data/app/graphql/masks/server/manage/mutations/archive_organization.rb +27 -0
  66. data/app/graphql/masks/server/manage/mutations/archive_provider.rb +28 -0
  67. data/app/graphql/masks/server/manage/mutations/archive_sender.rb +28 -0
  68. data/app/graphql/masks/server/manage/mutations/archive_sign_in_policy.rb +31 -0
  69. data/app/graphql/masks/server/manage/mutations/base_mutation.rb +139 -0
  70. data/app/graphql/masks/server/manage/mutations/block_device.rb +24 -0
  71. data/app/graphql/masks/server/manage/mutations/block_devices.rb +62 -0
  72. data/app/graphql/masks/server/manage/mutations/check_domain.rb +30 -0
  73. data/app/graphql/masks/server/manage/mutations/claim_domain.rb +26 -0
  74. data/app/graphql/masks/server/manage/mutations/create_actor.rb +50 -0
  75. data/app/graphql/masks/server/manage/mutations/create_client.rb +53 -0
  76. data/app/graphql/masks/server/manage/mutations/create_event_stream.rb +33 -0
  77. data/app/graphql/masks/server/manage/mutations/create_group.rb +25 -0
  78. data/app/graphql/masks/server/manage/mutations/create_organization.rb +34 -0
  79. data/app/graphql/masks/server/manage/mutations/create_provider.rb +117 -0
  80. data/app/graphql/masks/server/manage/mutations/create_saml_application.rb +53 -0
  81. data/app/graphql/masks/server/manage/mutations/create_sender.rb +35 -0
  82. data/app/graphql/masks/server/manage/mutations/create_sign_in_policy.rb +24 -0
  83. data/app/graphql/masks/server/manage/mutations/delete_actor.rb +31 -0
  84. data/app/graphql/masks/server/manage/mutations/delete_group.rb +24 -0
  85. data/app/graphql/masks/server/manage/mutations/disable_authenticator.rb +32 -0
  86. data/app/graphql/masks/server/manage/mutations/disable_code_factor.rb +27 -0
  87. data/app/graphql/masks/server/manage/mutations/discard_signing_key.rb +26 -0
  88. data/app/graphql/masks/server/manage/mutations/discover_provider.rb +39 -0
  89. data/app/graphql/masks/server/manage/mutations/dismiss_recovery.rb +25 -0
  90. data/app/graphql/masks/server/manage/mutations/domain_mutation.rb +24 -0
  91. data/app/graphql/masks/server/manage/mutations/export_events.rb +41 -0
  92. data/app/graphql/masks/server/manage/mutations/generate_backup_codes.rb +31 -0
  93. data/app/graphql/masks/server/manage/mutations/invite_actors.rb +46 -0
  94. data/app/graphql/masks/server/manage/mutations/issue_ldap_credential.rb +28 -0
  95. data/app/graphql/masks/server/manage/mutations/issue_provisioning_token.rb +33 -0
  96. data/app/graphql/masks/server/manage/mutations/organization_mutation.rb +26 -0
  97. data/app/graphql/masks/server/manage/mutations/read_saml_application_metadata.rb +39 -0
  98. data/app/graphql/masks/server/manage/mutations/read_saml_metadata.rb +43 -0
  99. data/app/graphql/masks/server/manage/mutations/register_provider.rb +30 -0
  100. data/app/graphql/masks/server/manage/mutations/release_domain.rb +25 -0
  101. data/app/graphql/masks/server/manage/mutations/release_namespace.rb +28 -0
  102. data/app/graphql/masks/server/manage/mutations/remove_avatar.rb +27 -0
  103. data/app/graphql/masks/server/manage/mutations/remove_group_member.rb +25 -0
  104. data/app/graphql/masks/server/manage/mutations/remove_member.rb +26 -0
  105. data/app/graphql/masks/server/manage/mutations/remove_tenant_logo.rb +19 -0
  106. data/app/graphql/masks/server/manage/mutations/resend_invitation.rb +25 -0
  107. data/app/graphql/masks/server/manage/mutations/resend_organization_invitation.rb +31 -0
  108. data/app/graphql/masks/server/manage/mutations/reset_password.rb +26 -0
  109. data/app/graphql/masks/server/manage/mutations/reset_second_factors.rb +23 -0
  110. data/app/graphql/masks/server/manage/mutations/restore_actor.rb +26 -0
  111. data/app/graphql/masks/server/manage/mutations/restore_client.rb +45 -0
  112. data/app/graphql/masks/server/manage/mutations/restore_event_stream.rb +28 -0
  113. data/app/graphql/masks/server/manage/mutations/restore_organization.rb +27 -0
  114. data/app/graphql/masks/server/manage/mutations/restore_provider.rb +28 -0
  115. data/app/graphql/masks/server/manage/mutations/restore_sender.rb +28 -0
  116. data/app/graphql/masks/server/manage/mutations/restore_sign_in_policy.rb +28 -0
  117. data/app/graphql/masks/server/manage/mutations/revoke_connection.rb +29 -0
  118. data/app/graphql/masks/server/manage/mutations/revoke_consent.rb +36 -0
  119. data/app/graphql/masks/server/manage/mutations/revoke_delegation.rb +24 -0
  120. data/app/graphql/masks/server/manage/mutations/revoke_ldap_credential.rb +26 -0
  121. data/app/graphql/masks/server/manage/mutations/revoke_passkey.rb +28 -0
  122. data/app/graphql/masks/server/manage/mutations/revoke_provisioning_token.rb +24 -0
  123. data/app/graphql/masks/server/manage/mutations/revoke_session.rb +25 -0
  124. data/app/graphql/masks/server/manage/mutations/revoke_token.rb +34 -0
  125. data/app/graphql/masks/server/manage/mutations/rotate_client_secret.rb +32 -0
  126. data/app/graphql/masks/server/manage/mutations/rotate_event_stream_secret.rb +28 -0
  127. data/app/graphql/masks/server/manage/mutations/rotate_signing_key.rb +21 -0
  128. data/app/graphql/masks/server/manage/mutations/serve_domain.rb +34 -0
  129. data/app/graphql/masks/server/manage/mutations/set_actor_scopes.rb +33 -0
  130. data/app/graphql/masks/server/manage/mutations/set_member_role.rb +26 -0
  131. data/app/graphql/masks/server/manage/mutations/set_provider_organization.rb +49 -0
  132. data/app/graphql/masks/server/manage/mutations/sign_in_policy_mutation.rb +57 -0
  133. data/app/graphql/masks/server/manage/mutations/sign_out_actor.rb +24 -0
  134. data/app/graphql/masks/server/manage/mutations/sign_out_device.rb +24 -0
  135. data/app/graphql/masks/server/manage/mutations/stage_signing_key.rb +27 -0
  136. data/app/graphql/masks/server/manage/mutations/suspend_actor.rb +27 -0
  137. data/app/graphql/masks/server/manage/mutations/test_event_stream.rb +33 -0
  138. data/app/graphql/masks/server/manage/mutations/test_sender.rb +31 -0
  139. data/app/graphql/masks/server/manage/mutations/unblock_device.rb +24 -0
  140. data/app/graphql/masks/server/manage/mutations/unblock_devices.rb +31 -0
  141. data/app/graphql/masks/server/manage/mutations/update_actor.rb +49 -0
  142. data/app/graphql/masks/server/manage/mutations/update_client.rb +105 -0
  143. data/app/graphql/masks/server/manage/mutations/update_domain_claim.rb +26 -0
  144. data/app/graphql/masks/server/manage/mutations/update_event_stream.rb +37 -0
  145. data/app/graphql/masks/server/manage/mutations/update_group.rb +24 -0
  146. data/app/graphql/masks/server/manage/mutations/update_mail_template.rb +37 -0
  147. data/app/graphql/masks/server/manage/mutations/update_organization.rb +34 -0
  148. data/app/graphql/masks/server/manage/mutations/update_provider.rb +87 -0
  149. data/app/graphql/masks/server/manage/mutations/update_sender.rb +35 -0
  150. data/app/graphql/masks/server/manage/mutations/update_sign_in_policy.rb +28 -0
  151. data/app/graphql/masks/server/manage/mutations/update_tenant.rb +122 -0
  152. data/app/graphql/masks/server/manage/mutations/upload_avatar.rb +27 -0
  153. data/app/graphql/masks/server/manage/mutations/upload_tenant_logo.rb +23 -0
  154. data/app/graphql/masks/server/manage/mutations/verify_email.rb +26 -0
  155. data/app/graphql/masks/server/manage/sources/membership_counts.rb +29 -0
  156. data/app/graphql/masks/server/manage/types/activity_day_type.rb +12 -0
  157. data/app/graphql/masks/server/manage/types/actor_type.rb +151 -0
  158. data/app/graphql/masks/server/manage/types/app_preset_type.rb +18 -0
  159. data/app/graphql/masks/server/manage/types/app_setting_type.rb +14 -0
  160. data/app/graphql/masks/server/manage/types/avatars_type.rb +13 -0
  161. data/app/graphql/masks/server/manage/types/base_object.rb +10 -0
  162. data/app/graphql/masks/server/manage/types/client_type.rb +121 -0
  163. data/app/graphql/masks/server/manage/types/connection_type.rb +37 -0
  164. data/app/graphql/masks/server/manage/types/consent_type.rb +30 -0
  165. data/app/graphql/masks/server/manage/types/delegation_type.rb +32 -0
  166. data/app/graphql/masks/server/manage/types/device_type.rb +35 -0
  167. data/app/graphql/masks/server/manage/types/domain_claim_type.rb +17 -0
  168. data/app/graphql/masks/server/manage/types/event_action_type.rb +20 -0
  169. data/app/graphql/masks/server/manage/types/event_stream_type.rb +21 -0
  170. data/app/graphql/masks/server/manage/types/event_type.rb +27 -0
  171. data/app/graphql/masks/server/manage/types/group_type.rb +25 -0
  172. data/app/graphql/masks/server/manage/types/invitation_outcome_type.rb +18 -0
  173. data/app/graphql/masks/server/manage/types/ldap_credential_type.rb +20 -0
  174. data/app/graphql/masks/server/manage/types/mail_preview_type.rb +19 -0
  175. data/app/graphql/masks/server/manage/types/mail_template_type.rb +20 -0
  176. data/app/graphql/masks/server/manage/types/membership_type.rb +24 -0
  177. data/app/graphql/masks/server/manage/types/mutation_type.rb +103 -0
  178. data/app/graphql/masks/server/manage/types/namespace_type.rb +26 -0
  179. data/app/graphql/masks/server/manage/types/organization_type.rb +70 -0
  180. data/app/graphql/masks/server/manage/types/passkey_type.rb +22 -0
  181. data/app/graphql/masks/server/manage/types/provider_preset_type.rb +21 -0
  182. data/app/graphql/masks/server/manage/types/provider_type.rb +108 -0
  183. data/app/graphql/masks/server/manage/types/provisioning_token_type.rb +18 -0
  184. data/app/graphql/masks/server/manage/types/query_type.rb +536 -0
  185. data/app/graphql/masks/server/manage/types/sender_field_type.rb +18 -0
  186. data/app/graphql/masks/server/manage/types/sender_service_type.rb +14 -0
  187. data/app/graphql/masks/server/manage/types/sender_type.rb +29 -0
  188. data/app/graphql/masks/server/manage/types/session_type.rb +19 -0
  189. data/app/graphql/masks/server/manage/types/sign_in_policy_type.rb +54 -0
  190. data/app/graphql/masks/server/manage/types/signing_key_type.rb +23 -0
  191. data/app/graphql/masks/server/manage/types/tally_type.rb +14 -0
  192. data/app/graphql/masks/server/manage/types/tenant_type.rb +64 -0
  193. data/app/graphql/masks/server/manage/types/token_type.rb +42 -0
  194. data/app/graphql/masks/server/manage/types/upload_type.rb +21 -0
  195. data/app/graphql/masks/server/manage_schema.rb +23 -0
  196. data/app/helpers/masks/server/account_helper.rb +59 -0
  197. data/app/helpers/masks/server/application_helper.rb +39 -0
  198. data/app/helpers/masks/server/avatars_helper.rb +20 -0
  199. data/app/helpers/masks/server/events_helper.rb +19 -0
  200. data/app/helpers/masks/server/scopes_helper.rb +15 -0
  201. data/app/jobs/masks/server/application_job.rb +7 -0
  202. data/app/jobs/masks/server/backchannel_logout_job.rb +38 -0
  203. data/app/jobs/masks/server/check_domain_claims_job.rb +31 -0
  204. data/app/jobs/masks/server/cleanup_job.rb +53 -0
  205. data/app/jobs/masks/server/client_logo_job.rb +20 -0
  206. data/app/jobs/masks/server/event_stream_job.rb +40 -0
  207. data/app/jobs/masks/server/idle_accounts_job.rb +14 -0
  208. data/app/jobs/masks/server/mail_delivery_job.rb +7 -0
  209. data/app/jobs/masks/server/notification_job.rb +17 -0
  210. data/app/jobs/masks/server/refresh_authenticators_job.rb +14 -0
  211. data/app/jobs/masks/server/refresh_saml_metadata_job.rb +24 -0
  212. data/app/jobs/masks/server/rotate_signing_keys_job.rb +37 -0
  213. data/app/jobs/masks/server/saml_logout_job.rb +38 -0
  214. data/app/jobs/masks/server/signal_job.rb +45 -0
  215. data/app/jobs/masks/server/text_job.rb +17 -0
  216. data/app/ldap/masks/server/ldap/ber.rb +202 -0
  217. data/app/ldap/masks/server/ldap/connection.rb +149 -0
  218. data/app/ldap/masks/server/ldap/directory.rb +175 -0
  219. data/app/ldap/masks/server/ldap/dn.rb +185 -0
  220. data/app/ldap/masks/server/ldap/entry.rb +30 -0
  221. data/app/ldap/masks/server/ldap/filter.rb +239 -0
  222. data/app/ldap/masks/server/ldap/gate.rb +169 -0
  223. data/app/ldap/masks/server/ldap/listener.rb +113 -0
  224. data/app/ldap/masks/server/ldap/protocol.rb +174 -0
  225. data/app/logins/masks/server/login_state.rb +153 -0
  226. data/app/logins/masks/server/login_states/app_access.rb +18 -0
  227. data/app/logins/masks/server/login_states/backup_code.rb +69 -0
  228. data/app/logins/masks/server/login_states/code_factor.rb +100 -0
  229. data/app/logins/masks/server/login_states/configure.rb +43 -0
  230. data/app/logins/masks/server/login_states/confirmation.rb +193 -0
  231. data/app/logins/masks/server/login_states/consent.rb +90 -0
  232. data/app/logins/masks/server/login_states/delegation.rb +172 -0
  233. data/app/logins/masks/server/login_states/email_code.rb +108 -0
  234. data/app/logins/masks/server/login_states/enrolment.rb +268 -0
  235. data/app/logins/masks/server/login_states/first_factor.rb +17 -0
  236. data/app/logins/masks/server/login_states/identifier.rb +48 -0
  237. data/app/logins/masks/server/login_states/inbox.rb +159 -0
  238. data/app/logins/masks/server/login_states/invitation.rb +80 -0
  239. data/app/logins/masks/server/login_states/one_time_password.rb +30 -0
  240. data/app/logins/masks/server/login_states/organization_choice.rb +108 -0
  241. data/app/logins/masks/server/login_states/passkey.rb +113 -0
  242. data/app/logins/masks/server/login_states/password.rb +40 -0
  243. data/app/logins/masks/server/login_states/password_reset.rb +88 -0
  244. data/app/logins/masks/server/login_states/provider.rb +181 -0
  245. data/app/logins/masks/server/login_states/risk_check.rb +79 -0
  246. data/app/logins/masks/server/login_states/second_factor.rb +55 -0
  247. data/app/logins/masks/server/login_states/signup.rb +351 -0
  248. data/app/logins/masks/server/login_states/suspension.rb +18 -0
  249. data/app/logins/masks/server/login_states/trusted_device.rb +84 -0
  250. data/app/mailers/masks/server/actor_mailer.rb +184 -0
  251. data/app/mailers/masks/server/application_mailer.rb +66 -0
  252. data/app/mailers/masks/server/sender_mailer.rb +13 -0
  253. data/app/models/concerns/masks/server/archivable.rb +22 -0
  254. data/app/models/concerns/masks/server/carries_authorization.rb +75 -0
  255. data/app/models/concerns/masks/server/mailed_link.rb +47 -0
  256. data/app/models/concerns/masks/server/paged.rb +18 -0
  257. data/app/models/concerns/masks/server/tenant_scoped.rb +13 -0
  258. data/app/models/masks/server/access_token.rb +69 -0
  259. data/app/models/masks/server/account_export.rb +144 -0
  260. data/app/models/masks/server/actor.rb +523 -0
  261. data/app/models/masks/server/addresses.rb +65 -0
  262. data/app/models/masks/server/app_preset.rb +251 -0
  263. data/app/models/masks/server/application_record.rb +17 -0
  264. data/app/models/masks/server/apps.rb +56 -0
  265. data/app/models/masks/server/authenticator.rb +57 -0
  266. data/app/models/masks/server/authenticator_app.rb +51 -0
  267. data/app/models/masks/server/authenticators.rb +78 -0
  268. data/app/models/masks/server/authorization.rb +200 -0
  269. data/app/models/masks/server/authorization_code.rb +32 -0
  270. data/app/models/masks/server/authorization_details.rb +235 -0
  271. data/app/models/masks/server/authorize_request.rb +57 -0
  272. data/app/models/masks/server/avatar.rb +52 -0
  273. data/app/models/masks/server/avatars.rb +99 -0
  274. data/app/models/masks/server/backchannel_logout.rb +67 -0
  275. data/app/models/masks/server/breached_passwords.rb +29 -0
  276. data/app/models/masks/server/client.rb +604 -0
  277. data/app/models/masks/server/client_assertion.rb +59 -0
  278. data/app/models/masks/server/client_keys.rb +130 -0
  279. data/app/models/masks/server/client_logo.rb +55 -0
  280. data/app/models/masks/server/client_metadata_document.rb +178 -0
  281. data/app/models/masks/server/code_factors.rb +103 -0
  282. data/app/models/masks/server/confirmation_code.rb +110 -0
  283. data/app/models/masks/server/confirmations.rb +51 -0
  284. data/app/models/masks/server/connection.rb +140 -0
  285. data/app/models/masks/server/consent.rb +70 -0
  286. data/app/models/masks/server/current.rb +8 -0
  287. data/app/models/masks/server/declared.rb +127 -0
  288. data/app/models/masks/server/delegation.rb +94 -0
  289. data/app/models/masks/server/device.rb +145 -0
  290. data/app/models/masks/server/device_factor.rb +39 -0
  291. data/app/models/masks/server/device_grant.rb +93 -0
  292. data/app/models/masks/server/domain_claim.rb +85 -0
  293. data/app/models/masks/server/email_verification.rb +22 -0
  294. data/app/models/masks/server/event.rb +251 -0
  295. data/app/models/masks/server/event_export.rb +73 -0
  296. data/app/models/masks/server/event_stream.rb +131 -0
  297. data/app/models/masks/server/exchange.rb +240 -0
  298. data/app/models/masks/server/federation/mcp.rb +29 -0
  299. data/app/models/masks/server/federation/oauth2.rb +27 -0
  300. data/app/models/masks/server/federation/oidc.rb +146 -0
  301. data/app/models/masks/server/federation/protocol.rb +114 -0
  302. data/app/models/masks/server/federation/saml.rb +120 -0
  303. data/app/models/masks/server/forward_code.rb +13 -0
  304. data/app/models/masks/server/forward_session.rb +14 -0
  305. data/app/models/masks/server/forwarded.rb +40 -0
  306. data/app/models/masks/server/group.rb +31 -0
  307. data/app/models/masks/server/group_member.rb +10 -0
  308. data/app/models/masks/server/handshake.rb +172 -0
  309. data/app/models/masks/server/help_requests.rb +50 -0
  310. data/app/models/masks/server/identicon.rb +71 -0
  311. data/app/models/masks/server/idle_accounts.rb +96 -0
  312. data/app/models/masks/server/initial_access_token.rb +14 -0
  313. data/app/models/masks/server/initials.rb +75 -0
  314. data/app/models/masks/server/invitation.rb +29 -0
  315. data/app/models/masks/server/invitations.rb +24 -0
  316. data/app/models/masks/server/issuer.rb +205 -0
  317. data/app/models/masks/server/journey.rb +97 -0
  318. data/app/models/masks/server/ldap_credential.rb +51 -0
  319. data/app/models/masks/server/linking.rb +81 -0
  320. data/app/models/masks/server/locales.rb +55 -0
  321. data/app/models/masks/server/localized.rb +42 -0
  322. data/app/models/masks/server/locked_out.rb +30 -0
  323. data/app/models/masks/server/login.rb +469 -0
  324. data/app/models/masks/server/logout.rb +99 -0
  325. data/app/models/masks/server/mail_previews.rb +90 -0
  326. data/app/models/masks/server/mail_template.rb +77 -0
  327. data/app/models/masks/server/manage_roles.rb +48 -0
  328. data/app/models/masks/server/master_key.rb +44 -0
  329. data/app/models/masks/server/members.rb +166 -0
  330. data/app/models/masks/server/membership.rb +105 -0
  331. data/app/models/masks/server/namespace.rb +85 -0
  332. data/app/models/masks/server/notifications.rb +156 -0
  333. data/app/models/masks/server/organization.rb +74 -0
  334. data/app/models/masks/server/outbound.rb +165 -0
  335. data/app/models/masks/server/passkey.rb +83 -0
  336. data/app/models/masks/server/password_reset.rb +30 -0
  337. data/app/models/masks/server/passwords.rb +21 -0
  338. data/app/models/masks/server/pending_handshake.rb +36 -0
  339. data/app/models/masks/server/pending_login.rb +23 -0
  340. data/app/models/masks/server/pending_request.rb +69 -0
  341. data/app/models/masks/server/pictures.rb +84 -0
  342. data/app/models/masks/server/presented_token.rb +106 -0
  343. data/app/models/masks/server/proof.rb +170 -0
  344. data/app/models/masks/server/proof_of_work.rb +43 -0
  345. data/app/models/masks/server/provider.rb +576 -0
  346. data/app/models/masks/server/provider_domains.rb +9 -0
  347. data/app/models/masks/server/provider_preset.rb +234 -0
  348. data/app/models/masks/server/provisioning_token.rb +35 -0
  349. data/app/models/masks/server/pushed_request.rb +39 -0
  350. data/app/models/masks/server/received_signal.rb +131 -0
  351. data/app/models/masks/server/recoveries.rb +40 -0
  352. data/app/models/masks/server/refresh_token.rb +19 -0
  353. data/app/models/masks/server/relying_party.rb +76 -0
  354. data/app/models/masks/server/replay.rb +11 -0
  355. data/app/models/masks/server/request_object.rb +84 -0
  356. data/app/models/masks/server/resource_metadata.rb +70 -0
  357. data/app/models/masks/server/risk.rb +110 -0
  358. data/app/models/masks/server/saml_identity/farewells.rb +51 -0
  359. data/app/models/masks/server/saml_identity/logout_reply.rb +31 -0
  360. data/app/models/masks/server/saml_identity/logout_request.rb +51 -0
  361. data/app/models/masks/server/saml_identity/message.rb +171 -0
  362. data/app/models/masks/server/saml_identity/metadata.rb +43 -0
  363. data/app/models/masks/server/saml_identity/request.rb +57 -0
  364. data/app/models/masks/server/saml_identity/response.rb +137 -0
  365. data/app/models/masks/server/saml_identity/sign_off.rb +46 -0
  366. data/app/models/masks/server/saml_identity.rb +87 -0
  367. data/app/models/masks/server/saml_participation.rb +35 -0
  368. data/app/models/masks/server/scim/directory.rb +57 -0
  369. data/app/models/masks/server/scim/filter.rb +124 -0
  370. data/app/models/masks/server/scim/group.rb +142 -0
  371. data/app/models/masks/server/scim/organization_directory.rb +70 -0
  372. data/app/models/masks/server/scim/user.rb +149 -0
  373. data/app/models/masks/server/scim.rb +41 -0
  374. data/app/models/masks/server/scopes.rb +128 -0
  375. data/app/models/masks/server/sector_identifier.rb +50 -0
  376. data/app/models/masks/server/sender.rb +173 -0
  377. data/app/models/masks/server/senders/click_send.rb +21 -0
  378. data/app/models/masks/server/senders/infobip.rb +34 -0
  379. data/app/models/masks/server/senders/mail.rb +36 -0
  380. data/app/models/masks/server/senders/message_bird.rb +20 -0
  381. data/app/models/masks/server/senders/plivo.rb +19 -0
  382. data/app/models/masks/server/senders/sinch.rb +22 -0
  383. data/app/models/masks/server/senders/sms.rb +76 -0
  384. data/app/models/masks/server/senders/sms_log.rb +19 -0
  385. data/app/models/masks/server/senders/smtp.rb +60 -0
  386. data/app/models/masks/server/senders/sns.rb +72 -0
  387. data/app/models/masks/server/senders/telnyx.rb +18 -0
  388. data/app/models/masks/server/senders/twilio.rb +21 -0
  389. data/app/models/masks/server/senders/vonage.rb +25 -0
  390. data/app/models/masks/server/session.rb +134 -0
  391. data/app/models/masks/server/sign_in_approval.rb +70 -0
  392. data/app/models/masks/server/sign_in_policy.rb +202 -0
  393. data/app/models/masks/server/signal_stream.rb +147 -0
  394. data/app/models/masks/server/signals.rb +72 -0
  395. data/app/models/masks/server/signing_key.rb +112 -0
  396. data/app/models/masks/server/single_sign_on.rb +262 -0
  397. data/app/models/masks/server/subject.rb +14 -0
  398. data/app/models/masks/server/subjects.rb +39 -0
  399. data/app/models/masks/server/tenant.rb +476 -0
  400. data/app/models/masks/server/tenant_logo.rb +44 -0
  401. data/app/models/masks/server/texting.rb +16 -0
  402. data/app/models/masks/server/themes.rb +64 -0
  403. data/app/models/masks/server/token.rb +183 -0
  404. data/app/models/masks/server/user_codes.rb +32 -0
  405. data/app/models/masks/server/verifications.rb +26 -0
  406. data/app/policies/masks/server/authorization_policy.rb +55 -0
  407. data/app/policies/masks/server/client_policy.rb +21 -0
  408. data/app/policies/masks/server/device_policy.rb +22 -0
  409. data/app/policies/masks/server/exchange_policy.rb +155 -0
  410. data/app/policies/masks/server/grant_checks.rb +45 -0
  411. data/app/policies/masks/server/policy.rb +64 -0
  412. data/app/views/layouts/masks/server/application.html.erb +40 -0
  413. data/app/views/layouts/masks/server/mailer.html.erb +263 -0
  414. data/app/views/layouts/masks/server/mailer.text.erb +7 -0
  415. data/app/views/layouts/masks/server/manage.html.erb +22 -0
  416. data/app/views/masks/server/account/_activity.html.erb +44 -0
  417. data/app/views/masks/server/account/_address.html.erb +42 -0
  418. data/app/views/masks/server/account/_approve.html.erb +56 -0
  419. data/app/views/masks/server/account/_apps.html.erb +129 -0
  420. data/app/views/masks/server/account/_delete.html.erb +40 -0
  421. data/app/views/masks/server/account/_devices.html.erb +57 -0
  422. data/app/views/masks/server/account/_export.html.erb +29 -0
  423. data/app/views/masks/server/account/_head.html.erb +58 -0
  424. data/app/views/masks/server/account/_info.html.erb +81 -0
  425. data/app/views/masks/server/account/_launcher.html.erb +18 -0
  426. data/app/views/masks/server/account/_organizations.html.erb +171 -0
  427. data/app/views/masks/server/account/_signing_in.html.erb +339 -0
  428. data/app/views/masks/server/account/index.html.erb +41 -0
  429. data/app/views/masks/server/actor_mailer/_action.html.erb +18 -0
  430. data/app/views/masks/server/actor_mailer/_message.html.erb +7 -0
  431. data/app/views/masks/server/actor_mailer/_message.text.erb +1 -0
  432. data/app/views/masks/server/actor_mailer/approval_requested.html.erb +7 -0
  433. data/app/views/masks/server/actor_mailer/approval_requested.text.erb +7 -0
  434. data/app/views/masks/server/actor_mailer/approved.html.erb +7 -0
  435. data/app/views/masks/server/actor_mailer/approved.text.erb +7 -0
  436. data/app/views/masks/server/actor_mailer/confirmation_code.html.erb +9 -0
  437. data/app/views/masks/server/actor_mailer/confirmation_code.text.erb +7 -0
  438. data/app/views/masks/server/actor_mailer/email_verification.html.erb +11 -0
  439. data/app/views/masks/server/actor_mailer/email_verification.text.erb +7 -0
  440. data/app/views/masks/server/actor_mailer/idle.html.erb +9 -0
  441. data/app/views/masks/server/actor_mailer/idle.text.erb +9 -0
  442. data/app/views/masks/server/actor_mailer/invitation.html.erb +19 -0
  443. data/app/views/masks/server/actor_mailer/invitation.text.erb +13 -0
  444. data/app/views/masks/server/actor_mailer/notification.html.erb +20 -0
  445. data/app/views/masks/server/actor_mailer/notification.text.erb +15 -0
  446. data/app/views/masks/server/actor_mailer/organization_invitation.html.erb +11 -0
  447. data/app/views/masks/server/actor_mailer/organization_invitation.text.erb +11 -0
  448. data/app/views/masks/server/actor_mailer/password_reset.html.erb +15 -0
  449. data/app/views/masks/server/actor_mailer/password_reset.text.erb +11 -0
  450. data/app/views/masks/server/actor_mailer/recovery_requested.html.erb +7 -0
  451. data/app/views/masks/server/actor_mailer/recovery_requested.text.erb +7 -0
  452. data/app/views/masks/server/application/_flashes.html.erb +8 -0
  453. data/app/views/masks/server/application/_person.html.erb +27 -0
  454. data/app/views/masks/server/authorize/error.html.erb +12 -0
  455. data/app/views/masks/server/device_verifications/approved.html.erb +8 -0
  456. data/app/views/masks/server/device_verifications/show.html.erb +23 -0
  457. data/app/views/masks/server/handshakes/refused.html.erb +20 -0
  458. data/app/views/masks/server/handshakes/show.html.erb +141 -0
  459. data/app/views/masks/server/links/expired.html.erb +10 -0
  460. data/app/views/masks/server/links/verified.html.erb +8 -0
  461. data/app/views/masks/server/logins/_accept_invitation.html.erb +31 -0
  462. data/app/views/masks/server/logins/_add_phone.html.erb +14 -0
  463. data/app/views/masks/server/logins/_awaiting_approval.html.erb +7 -0
  464. data/app/views/masks/server/logins/_backup_code.html.erb +23 -0
  465. data/app/views/masks/server/logins/_choose_organization.html.erb +21 -0
  466. data/app/views/masks/server/logins/_code_form.html.erb +12 -0
  467. data/app/views/masks/server/logins/_confirm_email.html.erb +19 -0
  468. data/app/views/masks/server/logins/_confirm_head.html.erb +12 -0
  469. data/app/views/masks/server/logins/_confirm_phone.html.erb +16 -0
  470. data/app/views/masks/server/logins/_consent.html.erb +109 -0
  471. data/app/views/masks/server/logins/_email_code.html.erb +7 -0
  472. data/app/views/masks/server/logins/_enrol.html.erb +103 -0
  473. data/app/views/masks/server/logins/_enrol_code_form.html.erb +9 -0
  474. data/app/views/masks/server/logins/_first_factor.html.erb +41 -0
  475. data/app/views/masks/server/logins/_head.html.erb +15 -0
  476. data/app/views/masks/server/logins/_header.html.erb +3 -0
  477. data/app/views/masks/server/logins/_hint.html.erb +6 -0
  478. data/app/views/masks/server/logins/_identified.html.erb +6 -0
  479. data/app/views/masks/server/logins/_identify.html.erb +24 -0
  480. data/app/views/masks/server/logins/_prove_email.html.erb +12 -0
  481. data/app/views/masks/server/logins/_providers.html.erb +21 -0
  482. data/app/views/masks/server/logins/_resend.html.erb +5 -0
  483. data/app/views/masks/server/logins/_reset_password.html.erb +23 -0
  484. data/app/views/masks/server/logins/_second_factor.html.erb +102 -0
  485. data/app/views/masks/server/logins/_setup_configure.html.erb +32 -0
  486. data/app/views/masks/server/logins/_signup.html.erb +85 -0
  487. data/app/views/masks/server/logins/_signup_credentials.html.erb +54 -0
  488. data/app/views/masks/server/logins/_signup_head.html.erb +20 -0
  489. data/app/views/masks/server/logins/_steps.html.erb +7 -0
  490. data/app/views/masks/server/logins/_warnings.html.erb +3 -0
  491. data/app/views/masks/server/logins/show.html.erb +14 -0
  492. data/app/views/masks/server/manage/index.html.erb +1 -0
  493. data/app/views/masks/server/refusals/show.html.erb +16 -0
  494. data/app/views/masks/server/saml/post.html.erb +16 -0
  495. data/app/views/masks/server/sender_mailer/trial.html.erb +1 -0
  496. data/app/views/masks/server/sender_mailer/trial.text.erb +1 -0
  497. data/app/views/masks/server/sessions/confirm.html.erb +29 -0
  498. data/config/initializers/fido_metadata.rb +5 -0
  499. data/config/initializers/inflections.rb +3 -0
  500. data/config/initializers/premailer.rb +7 -0
  501. data/config/initializers/rack_oauth2.rb +3 -0
  502. data/config/locales/de/account.yml +277 -0
  503. data/config/locales/de/actors.yml +8 -0
  504. data/config/locales/de/application.yml +6 -0
  505. data/config/locales/de/authorize.yml +7 -0
  506. data/config/locales/de/device_verifications.yml +15 -0
  507. data/config/locales/de/events.yml +189 -0
  508. data/config/locales/de/flashes.yml +164 -0
  509. data/config/locales/de/handshakes.yml +45 -0
  510. data/config/locales/de/links.yml +16 -0
  511. data/config/locales/de/logins.yml +272 -0
  512. data/config/locales/de/mailers.yml +135 -0
  513. data/config/locales/de/manage/activity.yml +31 -0
  514. data/config/locales/de/manage/actor.yml +125 -0
  515. data/config/locales/de/manage/actors.yml +78 -0
  516. data/config/locales/de/manage/api.yml +5 -0
  517. data/config/locales/de/manage/app.yml +24 -0
  518. data/config/locales/de/manage/client.yml +187 -0
  519. data/config/locales/de/manage/clients.yml +62 -0
  520. data/config/locales/de/manage/connections.yml +18 -0
  521. data/config/locales/de/manage/consents.yml +10 -0
  522. data/config/locales/de/manage/device.yml +30 -0
  523. data/config/locales/de/manage/devices.yml +59 -0
  524. data/config/locales/de/manage/directory.yml +5 -0
  525. data/config/locales/de/manage/domains.yml +28 -0
  526. data/config/locales/de/manage/emails.yml +30 -0
  527. data/config/locales/de/manage/event_labels.yml +5 -0
  528. data/config/locales/de/manage/events.yml +8 -0
  529. data/config/locales/de/manage/groups.yml +15 -0
  530. data/config/locales/de/manage/ldap.yml +35 -0
  531. data/config/locales/de/manage/mail_template.yml +18 -0
  532. data/config/locales/de/manage/messages.yml +11 -0
  533. data/config/locales/de/manage/namespaces.yml +14 -0
  534. data/config/locales/de/manage/organization.yml +132 -0
  535. data/config/locales/de/manage/organization_cell.yml +4 -0
  536. data/config/locales/de/manage/organization_headcount.yml +9 -0
  537. data/config/locales/de/manage/organizations.yml +31 -0
  538. data/config/locales/de/manage/pairing.yml +5 -0
  539. data/config/locales/de/manage/policies.yml +111 -0
  540. data/config/locales/de/manage/policy_rules.yml +73 -0
  541. data/config/locales/de/manage/presence.yml +26 -0
  542. data/config/locales/de/manage/providers.yml +156 -0
  543. data/config/locales/de/manage/provisioning.yml +29 -0
  544. data/config/locales/de/manage/scopes_editor.yml +21 -0
  545. data/config/locales/de/manage/senders.yml +43 -0
  546. data/config/locales/de/manage/settings.yml +147 -0
  547. data/config/locales/de/manage/settings_shell.yml +15 -0
  548. data/config/locales/de/manage/streams.yml +45 -0
  549. data/config/locales/de/manage/tokens.yml +21 -0
  550. data/config/locales/de/manage/ui.yml +23 -0
  551. data/config/locales/de/notifications.yml +15 -0
  552. data/config/locales/de/refusals.yml +16 -0
  553. data/config/locales/de/saml.yml +8 -0
  554. data/config/locales/de/scopes.yml +20 -0
  555. data/config/locales/de/senders.yml +12 -0
  556. data/config/locales/de/sessions.yml +10 -0
  557. data/config/locales/en/account.yml +278 -0
  558. data/config/locales/en/actors.yml +8 -0
  559. data/config/locales/en/application.yml +6 -0
  560. data/config/locales/en/authorize.yml +7 -0
  561. data/config/locales/en/device_verifications.yml +15 -0
  562. data/config/locales/en/events.yml +189 -0
  563. data/config/locales/en/flashes.yml +164 -0
  564. data/config/locales/en/handshakes.yml +45 -0
  565. data/config/locales/en/links.yml +16 -0
  566. data/config/locales/en/logins.yml +272 -0
  567. data/config/locales/en/mailers.yml +135 -0
  568. data/config/locales/en/manage/activity.yml +31 -0
  569. data/config/locales/en/manage/actor.yml +125 -0
  570. data/config/locales/en/manage/actors.yml +78 -0
  571. data/config/locales/en/manage/api.yml +5 -0
  572. data/config/locales/en/manage/app.yml +24 -0
  573. data/config/locales/en/manage/client.yml +187 -0
  574. data/config/locales/en/manage/clients.yml +62 -0
  575. data/config/locales/en/manage/connections.yml +18 -0
  576. data/config/locales/en/manage/consents.yml +10 -0
  577. data/config/locales/en/manage/device.yml +30 -0
  578. data/config/locales/en/manage/devices.yml +59 -0
  579. data/config/locales/en/manage/directory.yml +5 -0
  580. data/config/locales/en/manage/domains.yml +28 -0
  581. data/config/locales/en/manage/emails.yml +30 -0
  582. data/config/locales/en/manage/event_labels.yml +5 -0
  583. data/config/locales/en/manage/events.yml +8 -0
  584. data/config/locales/en/manage/groups.yml +15 -0
  585. data/config/locales/en/manage/ldap.yml +35 -0
  586. data/config/locales/en/manage/mail_template.yml +18 -0
  587. data/config/locales/en/manage/messages.yml +11 -0
  588. data/config/locales/en/manage/namespaces.yml +14 -0
  589. data/config/locales/en/manage/organization.yml +132 -0
  590. data/config/locales/en/manage/organization_cell.yml +4 -0
  591. data/config/locales/en/manage/organization_headcount.yml +9 -0
  592. data/config/locales/en/manage/organizations.yml +31 -0
  593. data/config/locales/en/manage/pairing.yml +5 -0
  594. data/config/locales/en/manage/policies.yml +111 -0
  595. data/config/locales/en/manage/policy_rules.yml +73 -0
  596. data/config/locales/en/manage/presence.yml +26 -0
  597. data/config/locales/en/manage/providers.yml +156 -0
  598. data/config/locales/en/manage/provisioning.yml +29 -0
  599. data/config/locales/en/manage/scopes_editor.yml +21 -0
  600. data/config/locales/en/manage/senders.yml +43 -0
  601. data/config/locales/en/manage/settings.yml +147 -0
  602. data/config/locales/en/manage/settings_shell.yml +15 -0
  603. data/config/locales/en/manage/streams.yml +45 -0
  604. data/config/locales/en/manage/tokens.yml +21 -0
  605. data/config/locales/en/manage/ui.yml +23 -0
  606. data/config/locales/en/notifications.yml +15 -0
  607. data/config/locales/en/refusals.yml +16 -0
  608. data/config/locales/en/saml.yml +8 -0
  609. data/config/locales/en/scopes.yml +20 -0
  610. data/config/locales/en/senders.yml +12 -0
  611. data/config/locales/en/sessions.yml +10 -0
  612. data/config/locales/es/account.yml +277 -0
  613. data/config/locales/es/actors.yml +8 -0
  614. data/config/locales/es/application.yml +6 -0
  615. data/config/locales/es/authorize.yml +7 -0
  616. data/config/locales/es/device_verifications.yml +15 -0
  617. data/config/locales/es/events.yml +189 -0
  618. data/config/locales/es/flashes.yml +164 -0
  619. data/config/locales/es/handshakes.yml +45 -0
  620. data/config/locales/es/links.yml +16 -0
  621. data/config/locales/es/logins.yml +272 -0
  622. data/config/locales/es/mailers.yml +135 -0
  623. data/config/locales/es/manage/activity.yml +31 -0
  624. data/config/locales/es/manage/actor.yml +125 -0
  625. data/config/locales/es/manage/actors.yml +78 -0
  626. data/config/locales/es/manage/api.yml +5 -0
  627. data/config/locales/es/manage/app.yml +24 -0
  628. data/config/locales/es/manage/client.yml +187 -0
  629. data/config/locales/es/manage/clients.yml +62 -0
  630. data/config/locales/es/manage/connections.yml +18 -0
  631. data/config/locales/es/manage/consents.yml +10 -0
  632. data/config/locales/es/manage/device.yml +30 -0
  633. data/config/locales/es/manage/devices.yml +59 -0
  634. data/config/locales/es/manage/directory.yml +5 -0
  635. data/config/locales/es/manage/domains.yml +28 -0
  636. data/config/locales/es/manage/emails.yml +30 -0
  637. data/config/locales/es/manage/event_labels.yml +5 -0
  638. data/config/locales/es/manage/events.yml +8 -0
  639. data/config/locales/es/manage/groups.yml +15 -0
  640. data/config/locales/es/manage/ldap.yml +35 -0
  641. data/config/locales/es/manage/mail_template.yml +18 -0
  642. data/config/locales/es/manage/messages.yml +11 -0
  643. data/config/locales/es/manage/namespaces.yml +14 -0
  644. data/config/locales/es/manage/organization.yml +132 -0
  645. data/config/locales/es/manage/organization_cell.yml +4 -0
  646. data/config/locales/es/manage/organization_headcount.yml +9 -0
  647. data/config/locales/es/manage/organizations.yml +31 -0
  648. data/config/locales/es/manage/pairing.yml +5 -0
  649. data/config/locales/es/manage/policies.yml +111 -0
  650. data/config/locales/es/manage/policy_rules.yml +73 -0
  651. data/config/locales/es/manage/presence.yml +26 -0
  652. data/config/locales/es/manage/providers.yml +156 -0
  653. data/config/locales/es/manage/provisioning.yml +29 -0
  654. data/config/locales/es/manage/scopes_editor.yml +21 -0
  655. data/config/locales/es/manage/senders.yml +43 -0
  656. data/config/locales/es/manage/settings.yml +147 -0
  657. data/config/locales/es/manage/settings_shell.yml +15 -0
  658. data/config/locales/es/manage/streams.yml +45 -0
  659. data/config/locales/es/manage/tokens.yml +21 -0
  660. data/config/locales/es/manage/ui.yml +23 -0
  661. data/config/locales/es/notifications.yml +15 -0
  662. data/config/locales/es/refusals.yml +16 -0
  663. data/config/locales/es/saml.yml +8 -0
  664. data/config/locales/es/scopes.yml +20 -0
  665. data/config/locales/es/senders.yml +12 -0
  666. data/config/locales/es/sessions.yml +10 -0
  667. data/config/locales/fr/account.yml +277 -0
  668. data/config/locales/fr/actors.yml +8 -0
  669. data/config/locales/fr/application.yml +6 -0
  670. data/config/locales/fr/authorize.yml +7 -0
  671. data/config/locales/fr/device_verifications.yml +15 -0
  672. data/config/locales/fr/events.yml +189 -0
  673. data/config/locales/fr/flashes.yml +164 -0
  674. data/config/locales/fr/handshakes.yml +45 -0
  675. data/config/locales/fr/links.yml +16 -0
  676. data/config/locales/fr/logins.yml +272 -0
  677. data/config/locales/fr/mailers.yml +135 -0
  678. data/config/locales/fr/manage/activity.yml +31 -0
  679. data/config/locales/fr/manage/actor.yml +125 -0
  680. data/config/locales/fr/manage/actors.yml +78 -0
  681. data/config/locales/fr/manage/api.yml +5 -0
  682. data/config/locales/fr/manage/app.yml +24 -0
  683. data/config/locales/fr/manage/client.yml +187 -0
  684. data/config/locales/fr/manage/clients.yml +62 -0
  685. data/config/locales/fr/manage/connections.yml +18 -0
  686. data/config/locales/fr/manage/consents.yml +10 -0
  687. data/config/locales/fr/manage/device.yml +30 -0
  688. data/config/locales/fr/manage/devices.yml +59 -0
  689. data/config/locales/fr/manage/directory.yml +5 -0
  690. data/config/locales/fr/manage/domains.yml +28 -0
  691. data/config/locales/fr/manage/emails.yml +30 -0
  692. data/config/locales/fr/manage/event_labels.yml +5 -0
  693. data/config/locales/fr/manage/events.yml +8 -0
  694. data/config/locales/fr/manage/groups.yml +15 -0
  695. data/config/locales/fr/manage/ldap.yml +35 -0
  696. data/config/locales/fr/manage/mail_template.yml +18 -0
  697. data/config/locales/fr/manage/messages.yml +11 -0
  698. data/config/locales/fr/manage/namespaces.yml +14 -0
  699. data/config/locales/fr/manage/organization.yml +132 -0
  700. data/config/locales/fr/manage/organization_cell.yml +4 -0
  701. data/config/locales/fr/manage/organization_headcount.yml +9 -0
  702. data/config/locales/fr/manage/organizations.yml +31 -0
  703. data/config/locales/fr/manage/pairing.yml +5 -0
  704. data/config/locales/fr/manage/policies.yml +111 -0
  705. data/config/locales/fr/manage/policy_rules.yml +73 -0
  706. data/config/locales/fr/manage/presence.yml +26 -0
  707. data/config/locales/fr/manage/providers.yml +156 -0
  708. data/config/locales/fr/manage/provisioning.yml +29 -0
  709. data/config/locales/fr/manage/scopes_editor.yml +21 -0
  710. data/config/locales/fr/manage/senders.yml +43 -0
  711. data/config/locales/fr/manage/settings.yml +147 -0
  712. data/config/locales/fr/manage/settings_shell.yml +15 -0
  713. data/config/locales/fr/manage/streams.yml +45 -0
  714. data/config/locales/fr/manage/tokens.yml +21 -0
  715. data/config/locales/fr/manage/ui.yml +23 -0
  716. data/config/locales/fr/notifications.yml +15 -0
  717. data/config/locales/fr/refusals.yml +16 -0
  718. data/config/locales/fr/saml.yml +8 -0
  719. data/config/locales/fr/scopes.yml +20 -0
  720. data/config/locales/fr/senders.yml +12 -0
  721. data/config/locales/fr/sessions.yml +10 -0
  722. data/config/passwords/LICENSE +21 -0
  723. data/config/passwords/common.txt +46907 -0
  724. data/config/routes.rb +152 -0
  725. data/db/authenticators.yml +18 -0
  726. data/db/migrate/20260912000000_create_masks_schema.rb +425 -0
  727. data/db/migrate/20260913000000_create_adapters.rb +46 -0
  728. data/db/migrate/20260913010000_create_sign_in_policies.rb +44 -0
  729. data/db/migrate/20260913020000_add_signup_to_actors.rb +10 -0
  730. data/db/migrate/20260913030000_add_consent_required_to_clients.rb +5 -0
  731. data/db/migrate/20260913040000_remove_upstream_tokens.rb +9 -0
  732. data/db/migrate/20260913050000_add_role_to_providers.rb +23 -0
  733. data/db/migrate/20260913060000_add_protocols_to_providers.rb +19 -0
  734. data/db/migrate/20260913070000_add_saml_to_providers.rb +10 -0
  735. data/db/migrate/20260913080000_grant_identities_to_actors.rb +14 -0
  736. data/db/migrate/20260913090000_create_delegations.rb +56 -0
  737. data/db/migrate/20260914000000_add_keys_to_clients.rb +8 -0
  738. data/db/migrate/20260914010000_add_require_signed_request_object_to_clients.rb +5 -0
  739. data/db/migrate/20260914020000_add_provisioning_to_actors.rb +10 -0
  740. data/db/migrate/20260914030000_add_saml_to_clients.rb +17 -0
  741. data/db/migrate/20260921000000_create_client_logos.rb +30 -0
  742. data/db/migrate/20260921010000_add_setup_token_to_tenants.rb +5 -0
  743. data/db/migrate/20260926000000_add_code_factors_to_actors.rb +8 -0
  744. data/db/migrate/20260926010000_add_idle_accounts.rb +14 -0
  745. data/db/migrate/20260926020000_create_event_streams.rb +28 -0
  746. data/db/migrate/20260927000000_add_apps_require_second_factor_to_sign_in_policies.rb +5 -0
  747. data/db/migrate/20260927010000_add_session_policies.rb +14 -0
  748. data/db/migrate/20260927020000_create_organizations.rb +47 -0
  749. data/db/migrate/20260927030000_add_organizations_to_policies_and_providers.rb +12 -0
  750. data/db/migrate/20260927040000_add_organizations_to_events_and_streams.rb +8 -0
  751. data/db/migrate/20260927050000_create_domain_claims.rb +27 -0
  752. data/db/migrate/20260927060000_add_event_retention_to_tenants.rb +5 -0
  753. data/db/migrate/20260927070000_add_risk_to_sign_in_policies.rb +11 -0
  754. data/db/migrate/20260927110000_create_signal_streams.rb +31 -0
  755. data/db/migrate/20260927120000_add_custom_host_to_tenants.rb +6 -0
  756. data/db/migrate/20260927140500_add_first_factor_to_sessions.rb +6 -0
  757. data/db/migrate/20260927160000_add_invited_at_to_memberships.rb +15 -0
  758. data/db/migrate/20260927170000_grant_identities_to_actors_in_every_tenant.rb +17 -0
  759. data/db/migrate/20260927180000_move_directory_ids_to_memberships.rb +46 -0
  760. data/db/migrate/20261003120000_add_metadata_expires_at_to_clients.rb +5 -0
  761. data/db/migrate/20261003130000_create_mail_templates.rb +23 -0
  762. data/db/migrate/20261003140000_add_authorization_details.rb +7 -0
  763. data/db/migrate/20261004120000_add_remembering_to_consents.rb +7 -0
  764. data/db/migrate/20261004130000_add_receives_signals_to_providers.rb +5 -0
  765. data/db/migrate/20261010120000_add_root_to_tokens.rb +27 -0
  766. data/db/migrate/20261010130000_add_recovery_requested_at_to_actors.rb +6 -0
  767. data/db/migrate/20261010140000_create_groups.rb +38 -0
  768. data/db/migrate/20261010150000_add_token_lifetimes_to_clients.rb +6 -0
  769. data/db/migrate/20261010160000_create_tenant_logos.rb +27 -0
  770. data/db/migrate/20261011120000_index_pending_approvals.rb +5 -0
  771. data/db/migrate/20261011130000_add_key_rotation_days_to_tenants.rb +5 -0
  772. data/db/migrate/20261011140000_add_keys_derived_at_to_tenants.rb +5 -0
  773. data/db/migrate/20261011150000_add_proof_of_work_to_sign_in_policies.rb +5 -0
  774. data/db/migrate/20261011160000_add_password_required_to_sign_in_policies.rb +5 -0
  775. data/db/migrate/20261011170000_create_saml_participations.rb +30 -0
  776. data/db/migrate/20261011180000_rename_adapters_to_senders.rb +45 -0
  777. data/lib/generators/masks/server/install/install_generator.rb +116 -0
  778. data/lib/generators/masks/server/install/templates/masks_server.rb.tt +7 -0
  779. data/lib/masks/server/configuration.rb +134 -0
  780. data/lib/masks/server/engine.rb +60 -0
  781. data/lib/masks/server/forwarded_app.rb +19 -0
  782. data/lib/masks/server/forwarding.rb +29 -0
  783. data/lib/masks/server/host.rb +21 -0
  784. data/lib/masks/server/isolation.rb +34 -0
  785. data/lib/masks/server/journey_serializer.rb +17 -0
  786. data/lib/masks/server/schema_reference.rb +164 -0
  787. data/lib/masks/server/tenancy/job.rb +78 -0
  788. data/lib/masks/server/tenancy/middleware.rb +104 -0
  789. data/lib/masks/server/tenant_isolation.rb +40 -0
  790. data/lib/masks/server/tenant_key_provider.rb +76 -0
  791. data/lib/masks/server/version.rb +5 -0
  792. data/lib/masks/server.rb +116 -0
  793. data/lib/masks-server.rb +1 -0
  794. data/lib/puma/plugin/masks_ldap.rb +25 -0
  795. data/lib/rack/oauth2/server/token/extension/device_code.rb +40 -0
  796. data/lib/rack/oauth2/server/token/extension/token_exchange.rb +48 -0
  797. data/lib/tasks/masks.rake +22 -0
  798. data/public/masks-assets/assets/account-D46qDQCo.js +2 -0
  799. data/public/masks-assets/assets/account-D46qDQCo.js.map +1 -0
  800. data/public/masks-assets/assets/app-olx-5PkA.css +2 -0
  801. data/public/masks-assets/assets/console-CiuQ3qj0.css +1 -0
  802. data/public/masks-assets/assets/handshake-BYhhQ_X3.js +2 -0
  803. data/public/masks-assets/assets/handshake-BYhhQ_X3.js.map +1 -0
  804. data/public/masks-assets/assets/initial-D99AzFOd.js +3 -0
  805. data/public/masks-assets/assets/initial-D99AzFOd.js.map +1 -0
  806. data/public/masks-assets/assets/login-CNs1UpxJ.js +4 -0
  807. data/public/masks-assets/assets/login-CNs1UpxJ.js.map +1 -0
  808. data/public/masks-assets/assets/manage-Z3GmPDNQ.js +560 -0
  809. data/public/masks-assets/assets/manage-Z3GmPDNQ.js.map +1 -0
  810. data/public/masks-assets/assets/passkey-DIj_5LCY.js +2 -0
  811. data/public/masks-assets/assets/passkey-DIj_5LCY.js.map +1 -0
  812. data/public/masks-public/favicon.svg +27 -0
  813. data/public/masks-public/icon.png +0 -0
  814. data/public/masks-public/icon.svg +26 -0
  815. data/version.txt +1 -0
  816. metadata +1095 -0
@@ -0,0 +1,32 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class DelegationType < BaseObject
6
+ field :id, ID, null: false
7
+ field :client, ClientType, null: false
8
+ field :actor, ActorType, null: false
9
+ field :connection, ConnectionType, null: false
10
+ field :provider, ProviderType, null: false
11
+ field :scopes, [ String ], null: false
12
+ field :consented_at, GraphQL::Types::ISO8601DateTime, null: false
13
+ field :released_at, GraphQL::Types::ISO8601DateTime
14
+ field :revoked_at, GraphQL::Types::ISO8601DateTime
15
+ field :revoked_reason, String
16
+
17
+ def id
18
+ object.uuid
19
+ end
20
+
21
+ def provider
22
+ object.connection.provider
23
+ end
24
+
25
+ def scopes
26
+ Scopes.list(object.scopes)
27
+ end
28
+ end
29
+ end
30
+ end
31
+ end
32
+ end
@@ -0,0 +1,35 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class DeviceType < BaseObject
6
+ field :id, ID, null: false
7
+ field :label, String, null: false
8
+ field :name, String
9
+ field :category, String, null: false
10
+ field :known, Boolean, null: false
11
+ field :user_agent, String
12
+ field :ip_address, String
13
+ field :last_seen_at, GraphQL::Types::ISO8601DateTime, null: false
14
+ field :blocked_at, GraphQL::Types::ISO8601DateTime
15
+ field :created_at, GraphQL::Types::ISO8601DateTime, null: false
16
+
17
+ field :actors, [ ActorType ], null: false
18
+ field :sessions, [ "Masks::Server::Manage::Types::SessionType" ], null: false
19
+
20
+ def known
21
+ object.known?
22
+ end
23
+
24
+ def actors
25
+ Actor.where(id: object.sessions.select(:actor_id)).order(:nickname)
26
+ end
27
+
28
+ def sessions
29
+ object.sessions.live.includes(:actor).order(created_at: :desc)
30
+ end
31
+ end
32
+ end
33
+ end
34
+ end
35
+ end
@@ -0,0 +1,17 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class DomainClaimType < BaseObject
6
+ field :domain, ID, null: false
7
+ field :record_name, String, null: false, description: "The DNS name to publish a TXT record at."
8
+ field :record_value, String, null: false, description: "The TXT record's value."
9
+ field :verified_at, GraphQL::Types::ISO8601DateTime
10
+ field :checked_at, GraphQL::Types::ISO8601DateTime
11
+ field :missing_since, GraphQL::Types::ISO8601DateTime, description: "When a proven record stopped answering. The claim is released a week later."
12
+ field :provider, ProviderType, description: "The provider people with an address here are sent to."
13
+ end
14
+ end
15
+ end
16
+ end
17
+ end
@@ -0,0 +1,20 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class EventActionType < BaseObject
6
+ field :action, String, null: false
7
+ field :label, String, null: false
8
+
9
+ def action
10
+ object
11
+ end
12
+
13
+ def label
14
+ I18n.t("events.actions.#{object}", default: object)
15
+ end
16
+ end
17
+ end
18
+ end
19
+ end
20
+ end
@@ -0,0 +1,21 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class EventStreamType < BaseObject
6
+ field :key, ID, null: false
7
+ field :name, String, null: false
8
+ field :url, String, null: false
9
+ field :actions, [ String ], null: false
10
+ field :organization, "Masks::Server::Manage::Types::OrganizationType",
11
+ description: "When set, only this organization's events are sent."
12
+ field :last_delivered_at, GraphQL::Types::ISO8601DateTime
13
+ field :last_failure, String
14
+ field :archived_at, GraphQL::Types::ISO8601DateTime
15
+ field :created_at, GraphQL::Types::ISO8601DateTime, null: false
16
+ field :updated_at, GraphQL::Types::ISO8601DateTime, null: false
17
+ end
18
+ end
19
+ end
20
+ end
21
+ end
@@ -0,0 +1,27 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class EventType < BaseObject
6
+ field :id, ID, null: false
7
+ field :action, String, null: false
8
+ field :label, String, null: false
9
+ field :created_at, GraphQL::Types::ISO8601DateTime, null: false
10
+ field :ip_address, String
11
+ field :user_agent, String
12
+ field :details, GraphQL::Types::JSON, null: false
13
+
14
+ field :actor, ActorType
15
+ field :by, ActorType
16
+ field :client, ClientType
17
+ field :device, DeviceType
18
+ field :organization, "Masks::Server::Manage::Types::OrganizationType"
19
+
20
+ def label
21
+ I18n.t("events.actions.#{object.action}", default: object.action)
22
+ end
23
+ end
24
+ end
25
+ end
26
+ end
27
+ end
@@ -0,0 +1,25 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class GroupType < BaseObject
6
+ description "A named set of people in the tenant. The groups claim lists the key of each group a person is in."
7
+
8
+ field :key, String, null: false
9
+ field :name, String, null: false
10
+ field :member_count, Integer, null: false
11
+ field :members, [ ActorType ], null: false
12
+ field :created_at, GraphQL::Types::ISO8601DateTime, null: false
13
+
14
+ def member_count
15
+ object.members.count
16
+ end
17
+
18
+ def members
19
+ object.actors.order(:nickname)
20
+ end
21
+ end
22
+ end
23
+ end
24
+ end
25
+ end
@@ -0,0 +1,18 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class InvitationOutcomeType < BaseObject
6
+ description "What inviting one address did."
7
+
8
+ field :email, String, null: false
9
+ field :outcome, String, null: false,
10
+ description: "invited, exists when an account already uses the address, or invalid when it is not an address."
11
+ field :delivered, Boolean, null: false
12
+ field :url, String, description: "The invitation link, when masks could not mail it."
13
+ field :actor, ActorType
14
+ end
15
+ end
16
+ end
17
+ end
18
+ end
@@ -0,0 +1,20 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class LdapCredentialType < BaseObject
6
+ field :id, ID, null: false
7
+ field :label, String, null: false
8
+ field :bind_dn, String, null: false, description: "The DN an app binds as, under ou=services in this tenant's directory."
9
+ field :issued_by, ActorType
10
+ field :used_at, GraphQL::Types::ISO8601DateTime, description: "When an app last bound with it, to within five minutes."
11
+ field :created_at, GraphQL::Types::ISO8601DateTime, null: false
12
+
13
+ def bind_dn
14
+ Ldap::Directory.new(Current.tenant).service_dn(object.label).to_s
15
+ end
16
+ end
17
+ end
18
+ end
19
+ end
20
+ end
@@ -0,0 +1,19 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class MailPreviewType < BaseObject
6
+ field :key, ID, null: false
7
+ field :name, String, null: false
8
+ field :journey, String, null: false
9
+ field :heading, String, null: false
10
+ field :subject, String, null: false
11
+ field :from, String, null: false
12
+ field :to, String, null: false
13
+ field :html, String
14
+ field :text, String
15
+ end
16
+ end
17
+ end
18
+ end
19
+ end
@@ -0,0 +1,20 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class MailTemplateType < BaseObject
6
+ description "The tenant's own template for one kind of email. masks still adds the button or code, how long it lasts, and the lines that keep a person safe."
7
+
8
+ field :kind, ID, null: false,
9
+ description: "Which email this changes, or `signature` for the closing lines every email ends with."
10
+ field :subject, String, description: "The subject line. Blank keeps the one masks writes."
11
+ field :message, String,
12
+ description: "The opening text, in place of the one masks writes. A blank line starts a new paragraph. Blank keeps the one masks writes."
13
+ field :placeholders, [ String ], null: false,
14
+ description: "The names this kind fills in when written as `{{name}}`."
15
+ field :updated_at, GraphQL::Types::ISO8601DateTime
16
+ end
17
+ end
18
+ end
19
+ end
20
+ end
@@ -0,0 +1,24 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class MembershipType < BaseObject
6
+ field :actor, ActorType, null: false
7
+ field :organization, OrganizationType, null: false
8
+ field :role, String, null: false
9
+ field :pending, Boolean, null: false, description: "True until the person accepts. A pending membership grants nothing."
10
+ field :invited_by, ActorType
11
+ field :invited_as, String, description: "The address an invitation went to. Only that address can accept it."
12
+ field :provisioned, Boolean, null: false, description: "True when a directory added this member through SCIM."
13
+ field :external_id, String, description: "The id the organization's directory knows this member by."
14
+ field :invited_at, GraphQL::Types::ISO8601DateTime, description: "When the invitation was last sent."
15
+ field :expires_at, GraphQL::Types::ISO8601DateTime,
16
+ description: "When a pending invitation stops being accepted. Sending it again starts it over."
17
+ field :expired, Boolean, null: false, method: :expired?,
18
+ description: "True when the invitation can no longer be accepted."
19
+ field :created_at, GraphQL::Types::ISO8601DateTime, null: false
20
+ end
21
+ end
22
+ end
23
+ end
24
+ end
@@ -0,0 +1,103 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class MutationType < BaseObject
6
+ field :create_actor, mutation: Mutations::CreateActor
7
+ field :invite_actors, mutation: Mutations::InviteActors
8
+ field :resend_invitation, mutation: Mutations::ResendInvitation
9
+ field :reset_password, mutation: Mutations::ResetPassword
10
+ field :verify_email, mutation: Mutations::VerifyEmail
11
+ field :update_actor, mutation: Mutations::UpdateActor
12
+ field :approve_actor, mutation: Mutations::ApproveActor
13
+ field :set_actor_scopes, mutation: Mutations::SetActorScopes
14
+ field :sign_out_actor, mutation: Mutations::SignOutActor
15
+ field :suspend_actor, mutation: Mutations::SuspendActor
16
+ field :restore_actor, mutation: Mutations::RestoreActor
17
+ field :delete_actor, mutation: Mutations::DeleteActor
18
+ field :issue_provisioning_token, mutation: Mutations::IssueProvisioningToken
19
+ field :revoke_provisioning_token, mutation: Mutations::RevokeProvisioningToken
20
+ field :issue_ldap_credential, mutation: Mutations::IssueLdapCredential
21
+ field :revoke_ldap_credential, mutation: Mutations::RevokeLdapCredential
22
+ field :generate_backup_codes, mutation: Mutations::GenerateBackupCodes
23
+ field :disable_authenticator, mutation: Mutations::DisableAuthenticator
24
+ field :reset_second_factors, mutation: Mutations::ResetSecondFactors
25
+ field :dismiss_recovery, mutation: Mutations::DismissRecovery
26
+ field :create_group, mutation: Mutations::CreateGroup
27
+ field :update_group, mutation: Mutations::UpdateGroup
28
+ field :delete_group, mutation: Mutations::DeleteGroup
29
+ field :add_group_member, mutation: Mutations::AddGroupMember
30
+ field :remove_group_member, mutation: Mutations::RemoveGroupMember
31
+ field :disable_code_factor, mutation: Mutations::DisableCodeFactor
32
+ field :revoke_passkey, mutation: Mutations::RevokePasskey
33
+ field :upload_avatar, mutation: Mutations::UploadAvatar
34
+ field :remove_avatar, mutation: Mutations::RemoveAvatar
35
+ field :upload_tenant_logo, mutation: Mutations::UploadTenantLogo
36
+ field :remove_tenant_logo, mutation: Mutations::RemoveTenantLogo
37
+ field :create_client, mutation: Mutations::CreateClient
38
+ field :add_app, mutation: Mutations::AddApp
39
+ field :create_saml_application, mutation: Mutations::CreateSamlApplication
40
+ field :read_saml_application_metadata, mutation: Mutations::ReadSamlApplicationMetadata
41
+ field :update_client, mutation: Mutations::UpdateClient
42
+ field :rotate_client_secret, mutation: Mutations::RotateClientSecret
43
+ field :archive_client, mutation: Mutations::ArchiveClient
44
+ field :restore_client, mutation: Mutations::RestoreClient
45
+ field :release_namespace, mutation: Mutations::ReleaseNamespace
46
+ field :discover_provider, mutation: Mutations::DiscoverProvider
47
+ field :read_saml_metadata, mutation: Mutations::ReadSamlMetadata
48
+ field :create_provider, mutation: Mutations::CreateProvider
49
+ field :update_provider, mutation: Mutations::UpdateProvider
50
+ field :archive_provider, mutation: Mutations::ArchiveProvider
51
+ field :restore_provider, mutation: Mutations::RestoreProvider
52
+ field :revoke_token, mutation: Mutations::RevokeToken
53
+ field :revoke_connection, mutation: Mutations::RevokeConnection
54
+ field :revoke_consent, mutation: Mutations::RevokeConsent
55
+ field :revoke_delegation, mutation: Mutations::RevokeDelegation
56
+ field :register_provider, mutation: Mutations::RegisterProvider
57
+ field :revoke_session, mutation: Mutations::RevokeSession
58
+ field :block_device, mutation: Mutations::BlockDevice
59
+ field :unblock_device, mutation: Mutations::UnblockDevice
60
+ field :block_devices, mutation: Mutations::BlockDevices
61
+ field :unblock_devices, mutation: Mutations::UnblockDevices
62
+ field :sign_out_device, mutation: Mutations::SignOutDevice
63
+ field :update_tenant, mutation: Mutations::UpdateTenant
64
+ field :create_sign_in_policy, mutation: Mutations::CreateSignInPolicy
65
+ field :update_sign_in_policy, mutation: Mutations::UpdateSignInPolicy
66
+ field :archive_sign_in_policy, mutation: Mutations::ArchiveSignInPolicy
67
+ field :restore_sign_in_policy, mutation: Mutations::RestoreSignInPolicy
68
+ field :create_sender, mutation: Mutations::CreateSender
69
+ field :update_sender, mutation: Mutations::UpdateSender
70
+ field :archive_sender, mutation: Mutations::ArchiveSender
71
+ field :restore_sender, mutation: Mutations::RestoreSender
72
+ field :test_sender, mutation: Mutations::TestSender
73
+ field :create_event_stream, mutation: Mutations::CreateEventStream
74
+ field :update_event_stream, mutation: Mutations::UpdateEventStream
75
+ field :update_mail_template, mutation: Mutations::UpdateMailTemplate
76
+ field :archive_event_stream, mutation: Mutations::ArchiveEventStream
77
+ field :restore_event_stream, mutation: Mutations::RestoreEventStream
78
+ field :rotate_event_stream_secret, mutation: Mutations::RotateEventStreamSecret
79
+ field :test_event_stream, mutation: Mutations::TestEventStream
80
+ field :create_organization, mutation: Mutations::CreateOrganization
81
+ field :update_organization, mutation: Mutations::UpdateOrganization
82
+ field :archive_organization, mutation: Mutations::ArchiveOrganization
83
+ field :restore_organization, mutation: Mutations::RestoreOrganization
84
+ field :add_member, mutation: Mutations::AddMember
85
+ field :set_member_role, mutation: Mutations::SetMemberRole
86
+ field :remove_member, mutation: Mutations::RemoveMember
87
+ field :resend_organization_invitation, mutation: Mutations::ResendOrganizationInvitation
88
+ field :set_provider_organization, mutation: Mutations::SetProviderOrganization
89
+ field :claim_domain, mutation: Mutations::ClaimDomain
90
+ field :check_domain, mutation: Mutations::CheckDomain
91
+ field :update_domain_claim, mutation: Mutations::UpdateDomainClaim
92
+ field :release_domain, mutation: Mutations::ReleaseDomain
93
+ field :serve_domain, mutation: Mutations::ServeDomain
94
+ field :export_events, mutation: Mutations::ExportEvents
95
+ field :stage_signing_key, mutation: Mutations::StageSigningKey
96
+ field :activate_signing_key, mutation: Mutations::ActivateSigningKey
97
+ field :discard_signing_key, mutation: Mutations::DiscardSigningKey
98
+ field :rotate_signing_key, mutation: Mutations::RotateSigningKey
99
+ end
100
+ end
101
+ end
102
+ end
103
+ end
@@ -0,0 +1,26 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class NamespaceType < BaseObject
6
+ field :name, String, null: false
7
+ field :resource, String, null: false
8
+ field :client, ClientType
9
+ field :claimed_at, GraphQL::Types::ISO8601DateTime, null: false
10
+ field :releasable, Boolean, null: false
11
+ field :scopes, [ String ], null: false
12
+
13
+ def releasable
14
+ object.releasable?
15
+ end
16
+
17
+ def scopes
18
+ ResourceMetadata.new(object.resource).descriptions.keys.select do |scope|
19
+ scope.start_with?(object.name)
20
+ end
21
+ end
22
+ end
23
+ end
24
+ end
25
+ end
26
+ end
@@ -0,0 +1,70 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class OrganizationType < BaseObject
6
+ field :uuid, ID, null: false
7
+ field :key, ID, null: false
8
+ field :name, String, null: false
9
+ field :roles, [ String ], null: false, description: "Every role a member can hold here, owner and member included."
10
+ field :members, [ "Masks::Server::Manage::Types::MembershipType" ], null: false
11
+ field :member_count, Integer, null: false, description: "Members who have accepted."
12
+ field :owner_count, Integer, null: false, description: "Members who have accepted and hold owner."
13
+ field :pending_count, Integer, null: false, description: "Invitations still open, neither accepted nor expired."
14
+ field :live_token_count, Integer, null: false,
15
+ description: "Live tokens issued for this organization. Archiving revokes them."
16
+ field :domains, [ DomainClaimType ], null: false,
17
+ description: "Domains claimed for this organization's providers, proven or not."
18
+ field :provisioning_tokens, [ ProvisioningTokenType ], null: false,
19
+ description: "Live provisioning tokens that reach only this organization."
20
+ field :sign_in_policy, SignInPolicyType, description: "The policy for signing in as a member, ahead of the app's and the tenant's."
21
+ field :providers, [ ProviderType ], null: false
22
+ field :events, [ EventType ], null: false, description: "The organization's most recent events."
23
+ field :archived_at, GraphQL::Types::ISO8601DateTime
24
+ field :created_at, GraphQL::Types::ISO8601DateTime, null: false
25
+
26
+ def roles
27
+ object.role_list
28
+ end
29
+
30
+ def members
31
+ object.memberships.includes(:actor, :invited_by).joins(:actor).order("actors.nickname", "actors.email")
32
+ end
33
+
34
+ def providers
35
+ object.providers.active.order(:name)
36
+ end
37
+
38
+ def events
39
+ Masks::Server::Event.where(organization: object).newest_first.includes(:actor, :by, :client, :device)
40
+ .limit(Masks::Server::Event::LIMIT)
41
+ end
42
+
43
+ def member_count
44
+ dataloader.with(Sources::MembershipCounts, :members).load(object.id)
45
+ end
46
+
47
+ def owner_count
48
+ dataloader.with(Sources::MembershipCounts, :owners).load(object.id)
49
+ end
50
+
51
+ def pending_count
52
+ dataloader.with(Sources::MembershipCounts, :pending).load(object.id)
53
+ end
54
+
55
+ def live_token_count
56
+ object.tokens.live.count
57
+ end
58
+
59
+ def domains
60
+ Masks::Server::DomainClaim.where(provider: object.providers.active).includes(:provider).order(:domain)
61
+ end
62
+
63
+ def provisioning_tokens
64
+ Masks::Server::ProvisioningToken.live.where(organization: object).order(created_at: :desc)
65
+ end
66
+ end
67
+ end
68
+ end
69
+ end
70
+ end
@@ -0,0 +1,22 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class PasskeyType < BaseObject
6
+ field :id, ID, null: false
7
+ field :label, String, null: false
8
+ field :aaguid, String
9
+ field :certification, String
10
+ field :compromise, String
11
+ field :user_verified, Boolean, null: false
12
+ field :last_used_at, GraphQL::Types::ISO8601DateTime
13
+ field :created_at, GraphQL::Types::ISO8601DateTime, null: false
14
+
15
+ def certification
16
+ object.authenticator&.certification
17
+ end
18
+ end
19
+ end
20
+ end
21
+ end
22
+ end
@@ -0,0 +1,21 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class ProviderPresetType < BaseObject
6
+ field :key, ID, null: false
7
+ field :name, String, null: false
8
+ field :protocol, String, null: false
9
+ field :asks, [ String ], null: false
10
+ field :needs, [ String ], null: false
11
+ field :defaults, GraphQL::Types::JSON, null: false
12
+ field :guide, String
13
+ field :trusts_email, Boolean, null: false
14
+ field :custom, Boolean, null: false, method: :custom?
15
+ field :delegated_scopes, [ String ], null: false
16
+ field :delegates, Boolean, null: false, method: :delegates?
17
+ end
18
+ end
19
+ end
20
+ end
21
+ end
@@ -0,0 +1,108 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class ProviderType < BaseObject
6
+ field :key, ID, null: false
7
+ field :name, String, null: false
8
+ field :protocol, String, null: false
9
+ field :preset, String
10
+ field :authorization_url, String
11
+ field :token_url, String
12
+ field :userinfo_url, String
13
+ field :client_id, String
14
+ field :emails_url, String
15
+ field :claims, GraphQL::Types::JSON, null: false
16
+ field :token_auth_method, String, null: false
17
+ field :response_mode, String
18
+ field :team_id, String
19
+ field :key_id, String
20
+ field :private_key_held, Boolean, null: false
21
+ field :callback_url, String, null: false
22
+ field :idp_entity_id, String
23
+ field :idp_sso_url, String
24
+ field :idp_certificates, String
25
+ field :metadata_url, String
26
+ field :metadata_fetched_at, GraphQL::Types::ISO8601DateTime
27
+ field :name_id_format, String
28
+ field :sp_entity_id, String
29
+ field :scopes, [ String ], null: false
30
+ field :authorize_params, GraphQL::Types::JSON, null: false
31
+ field :subject_claim, String, null: false
32
+ field :secret_held, Boolean, null: false
33
+ field :connections, Integer, null: false
34
+ field :signed_in, Integer, null: false
35
+ field :archived_at, GraphQL::Types::ISO8601DateTime
36
+ field :organization, "Masks::Server::Manage::Types::OrganizationType",
37
+ description: "The organization whose people sign in through this provider, or null for the whole tenant."
38
+ field :role_claim, String, description: "The claim that lists a person's groups. groups when null."
39
+ field :role_map, GraphQL::Types::JSON, null: false, description: "Groups mapped to organization roles. The first group a person holds wins."
40
+ field :unmapped_role, String, description: "The role for someone in none of the mapped groups. member when null."
41
+ field :created_at, GraphQL::Types::ISO8601DateTime, null: false
42
+
43
+ field :issuer, String
44
+ field :jwks_uri, String
45
+ field :jwks_fetched_at, GraphQL::Types::ISO8601DateTime
46
+ field :role, String, null: false
47
+ field :trusts_email, Boolean, null: false
48
+ field :receives_signals, Boolean, null: false,
49
+ description: "Whether masks accepts the shared signals this provider sends to /ssf/events."
50
+ field :email_domains, [ String ], null: false
51
+ field :signup_scopes, [ String ], null: false
52
+ field :delegates, Boolean, null: false
53
+ field :delegated_scopes, [ String ], null: false
54
+ field :delegation_params, GraphQL::Types::JSON, null: false
55
+ field :delegation_scope, String, null: false
56
+ field :resource_url, String
57
+ field :registration_url, String
58
+ field :registered_at, GraphQL::Types::ISO8601DateTime
59
+ field :delegations, Integer, null: false
60
+
61
+ def scopes
62
+ object.scope_list
63
+ end
64
+
65
+ def email_domains
66
+ object.email_domain_list
67
+ end
68
+
69
+ def signup_scopes
70
+ Scopes.list(object.signup_scopes)
71
+ end
72
+
73
+ def secret_held
74
+ object.client_secret.present?
75
+ end
76
+
77
+ def sp_entity_id
78
+ object.saml? ? object.federation.entity_id : nil
79
+ end
80
+
81
+ def private_key_held
82
+ object.private_key.present?
83
+ end
84
+
85
+ def callback_url
86
+ object.callback_url
87
+ end
88
+
89
+ def connections
90
+ Masks::Server::Connection.live.where(provider_id: object.id).count
91
+ end
92
+
93
+ def delegated_scopes
94
+ object.delegated_scope_list
95
+ end
96
+
97
+ def delegations
98
+ Masks::Server::Delegation.live.joins(:connection).where(connections: { provider_id: object.id }).count
99
+ end
100
+
101
+ def signed_in
102
+ Masks::Server::Connection.live.where(provider_id: object.id).where.not(signed_in_at: nil).count
103
+ end
104
+ end
105
+ end
106
+ end
107
+ end
108
+ end
@@ -0,0 +1,18 @@
1
+ module Masks
2
+ module Server
3
+ module Manage
4
+ module Types
5
+ class ProvisioningTokenType < BaseObject
6
+ field :id, ID, null: false
7
+ field :label, String, null: false
8
+ field :issued_by, ActorType
9
+ field :organization, "Masks::Server::Manage::Types::OrganizationType",
10
+ description: "The one organization this token provisions into, or null for every account."
11
+ field :used_at, GraphQL::Types::ISO8601DateTime
12
+ field :expires_at, GraphQL::Types::ISO8601DateTime, null: false
13
+ field :created_at, GraphQL::Types::ISO8601DateTime, null: false
14
+ end
15
+ end
16
+ end
17
+ end
18
+ end