masks-server 0.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +7 -0
- data/app/controllers/concerns/masks/server/client_authentication.rb +65 -0
- data/app/controllers/concerns/masks/server/holds_login.rb +49 -0
- data/app/controllers/concerns/masks/server/manage_endpoint.rb +34 -0
- data/app/controllers/concerns/masks/server/rack_oauth2_endpoint.rb +45 -0
- data/app/controllers/concerns/masks/server/resource_token.rb +145 -0
- data/app/controllers/concerns/masks/server/saml_farewells.rb +53 -0
- data/app/controllers/concerns/masks/server/scim_endpoint.rb +100 -0
- data/app/controllers/concerns/masks/server/serves_pictures.rb +27 -0
- data/app/controllers/concerns/masks/server/token_presented.rb +47 -0
- data/app/controllers/masks/server/account_controller.rb +73 -0
- data/app/controllers/masks/server/account_exports_controller.rb +25 -0
- data/app/controllers/masks/server/addresses_controller.rb +78 -0
- data/app/controllers/masks/server/application_controller.rb +322 -0
- data/app/controllers/masks/server/apps_controller.rb +37 -0
- data/app/controllers/masks/server/authenticator_apps_controller.rb +53 -0
- data/app/controllers/masks/server/authorize_controller.rb +197 -0
- data/app/controllers/masks/server/avatars_controller.rb +118 -0
- data/app/controllers/masks/server/backup_codes_controller.rb +29 -0
- data/app/controllers/masks/server/client_logos_controller.rb +22 -0
- data/app/controllers/masks/server/code_factors_controller.rb +38 -0
- data/app/controllers/masks/server/connections_controller.rb +43 -0
- data/app/controllers/masks/server/delegations_controller.rb +24 -0
- data/app/controllers/masks/server/device_authorizations_controller.rb +74 -0
- data/app/controllers/masks/server/device_verifications_controller.rb +78 -0
- data/app/controllers/masks/server/devices_controller.rb +50 -0
- data/app/controllers/masks/server/discovery_controller.rb +18 -0
- data/app/controllers/masks/server/forward_auth_controller.rb +90 -0
- data/app/controllers/masks/server/handshakes_controller.rb +178 -0
- data/app/controllers/masks/server/introspections_controller.rb +51 -0
- data/app/controllers/masks/server/links_controller.rb +41 -0
- data/app/controllers/masks/server/logins_controller.rb +239 -0
- data/app/controllers/masks/server/manage/exports_controller.rb +22 -0
- data/app/controllers/masks/server/manage/graphql_controller.rb +70 -0
- data/app/controllers/masks/server/manage_controller.rb +19 -0
- data/app/controllers/masks/server/notifications_controller.rb +23 -0
- data/app/controllers/masks/server/organization_members_controller.rb +118 -0
- data/app/controllers/masks/server/passkeys_controller.rb +80 -0
- data/app/controllers/masks/server/passwords_controller.rb +67 -0
- data/app/controllers/masks/server/profiles_controller.rb +34 -0
- data/app/controllers/masks/server/provider_metadata_controller.rb +13 -0
- data/app/controllers/masks/server/pushed_authorizations_controller.rb +69 -0
- data/app/controllers/masks/server/received_signals_controller.rb +19 -0
- data/app/controllers/masks/server/registrations_controller.rb +137 -0
- data/app/controllers/masks/server/revocations_controller.rb +33 -0
- data/app/controllers/masks/server/saml_controller.rb +195 -0
- data/app/controllers/masks/server/scim/groups_controller.rb +157 -0
- data/app/controllers/masks/server/scim/metadata_controller.rb +123 -0
- data/app/controllers/masks/server/scim/users_controller.rb +128 -0
- data/app/controllers/masks/server/sessions_controller.rb +60 -0
- data/app/controllers/masks/server/sign_in_approvals_controller.rb +48 -0
- data/app/controllers/masks/server/signal_streams_controller.rb +162 -0
- data/app/controllers/masks/server/tenant_logos_controller.rb +21 -0
- data/app/controllers/masks/server/themes_controller.rb +21 -0
- data/app/controllers/masks/server/tokens_controller.rb +360 -0
- data/app/controllers/masks/server/userinfo_controller.rb +30 -0
- data/app/controllers/masks/server/verifications_controller.rb +32 -0
- data/app/graphql/masks/server/manage/mutations/activate_signing_key.rb +26 -0
- data/app/graphql/masks/server/manage/mutations/add_app.rb +64 -0
- data/app/graphql/masks/server/manage/mutations/add_group_member.rb +25 -0
- data/app/graphql/masks/server/manage/mutations/add_member.rb +36 -0
- data/app/graphql/masks/server/manage/mutations/approve_actor.rb +25 -0
- data/app/graphql/masks/server/manage/mutations/archive_client.rb +30 -0
- data/app/graphql/masks/server/manage/mutations/archive_event_stream.rb +28 -0
- data/app/graphql/masks/server/manage/mutations/archive_organization.rb +27 -0
- data/app/graphql/masks/server/manage/mutations/archive_provider.rb +28 -0
- data/app/graphql/masks/server/manage/mutations/archive_sender.rb +28 -0
- data/app/graphql/masks/server/manage/mutations/archive_sign_in_policy.rb +31 -0
- data/app/graphql/masks/server/manage/mutations/base_mutation.rb +139 -0
- data/app/graphql/masks/server/manage/mutations/block_device.rb +24 -0
- data/app/graphql/masks/server/manage/mutations/block_devices.rb +62 -0
- data/app/graphql/masks/server/manage/mutations/check_domain.rb +30 -0
- data/app/graphql/masks/server/manage/mutations/claim_domain.rb +26 -0
- data/app/graphql/masks/server/manage/mutations/create_actor.rb +50 -0
- data/app/graphql/masks/server/manage/mutations/create_client.rb +53 -0
- data/app/graphql/masks/server/manage/mutations/create_event_stream.rb +33 -0
- data/app/graphql/masks/server/manage/mutations/create_group.rb +25 -0
- data/app/graphql/masks/server/manage/mutations/create_organization.rb +34 -0
- data/app/graphql/masks/server/manage/mutations/create_provider.rb +117 -0
- data/app/graphql/masks/server/manage/mutations/create_saml_application.rb +53 -0
- data/app/graphql/masks/server/manage/mutations/create_sender.rb +35 -0
- data/app/graphql/masks/server/manage/mutations/create_sign_in_policy.rb +24 -0
- data/app/graphql/masks/server/manage/mutations/delete_actor.rb +31 -0
- data/app/graphql/masks/server/manage/mutations/delete_group.rb +24 -0
- data/app/graphql/masks/server/manage/mutations/disable_authenticator.rb +32 -0
- data/app/graphql/masks/server/manage/mutations/disable_code_factor.rb +27 -0
- data/app/graphql/masks/server/manage/mutations/discard_signing_key.rb +26 -0
- data/app/graphql/masks/server/manage/mutations/discover_provider.rb +39 -0
- data/app/graphql/masks/server/manage/mutations/dismiss_recovery.rb +25 -0
- data/app/graphql/masks/server/manage/mutations/domain_mutation.rb +24 -0
- data/app/graphql/masks/server/manage/mutations/export_events.rb +41 -0
- data/app/graphql/masks/server/manage/mutations/generate_backup_codes.rb +31 -0
- data/app/graphql/masks/server/manage/mutations/invite_actors.rb +46 -0
- data/app/graphql/masks/server/manage/mutations/issue_ldap_credential.rb +28 -0
- data/app/graphql/masks/server/manage/mutations/issue_provisioning_token.rb +33 -0
- data/app/graphql/masks/server/manage/mutations/organization_mutation.rb +26 -0
- data/app/graphql/masks/server/manage/mutations/read_saml_application_metadata.rb +39 -0
- data/app/graphql/masks/server/manage/mutations/read_saml_metadata.rb +43 -0
- data/app/graphql/masks/server/manage/mutations/register_provider.rb +30 -0
- data/app/graphql/masks/server/manage/mutations/release_domain.rb +25 -0
- data/app/graphql/masks/server/manage/mutations/release_namespace.rb +28 -0
- data/app/graphql/masks/server/manage/mutations/remove_avatar.rb +27 -0
- data/app/graphql/masks/server/manage/mutations/remove_group_member.rb +25 -0
- data/app/graphql/masks/server/manage/mutations/remove_member.rb +26 -0
- data/app/graphql/masks/server/manage/mutations/remove_tenant_logo.rb +19 -0
- data/app/graphql/masks/server/manage/mutations/resend_invitation.rb +25 -0
- data/app/graphql/masks/server/manage/mutations/resend_organization_invitation.rb +31 -0
- data/app/graphql/masks/server/manage/mutations/reset_password.rb +26 -0
- data/app/graphql/masks/server/manage/mutations/reset_second_factors.rb +23 -0
- data/app/graphql/masks/server/manage/mutations/restore_actor.rb +26 -0
- data/app/graphql/masks/server/manage/mutations/restore_client.rb +45 -0
- data/app/graphql/masks/server/manage/mutations/restore_event_stream.rb +28 -0
- data/app/graphql/masks/server/manage/mutations/restore_organization.rb +27 -0
- data/app/graphql/masks/server/manage/mutations/restore_provider.rb +28 -0
- data/app/graphql/masks/server/manage/mutations/restore_sender.rb +28 -0
- data/app/graphql/masks/server/manage/mutations/restore_sign_in_policy.rb +28 -0
- data/app/graphql/masks/server/manage/mutations/revoke_connection.rb +29 -0
- data/app/graphql/masks/server/manage/mutations/revoke_consent.rb +36 -0
- data/app/graphql/masks/server/manage/mutations/revoke_delegation.rb +24 -0
- data/app/graphql/masks/server/manage/mutations/revoke_ldap_credential.rb +26 -0
- data/app/graphql/masks/server/manage/mutations/revoke_passkey.rb +28 -0
- data/app/graphql/masks/server/manage/mutations/revoke_provisioning_token.rb +24 -0
- data/app/graphql/masks/server/manage/mutations/revoke_session.rb +25 -0
- data/app/graphql/masks/server/manage/mutations/revoke_token.rb +34 -0
- data/app/graphql/masks/server/manage/mutations/rotate_client_secret.rb +32 -0
- data/app/graphql/masks/server/manage/mutations/rotate_event_stream_secret.rb +28 -0
- data/app/graphql/masks/server/manage/mutations/rotate_signing_key.rb +21 -0
- data/app/graphql/masks/server/manage/mutations/serve_domain.rb +34 -0
- data/app/graphql/masks/server/manage/mutations/set_actor_scopes.rb +33 -0
- data/app/graphql/masks/server/manage/mutations/set_member_role.rb +26 -0
- data/app/graphql/masks/server/manage/mutations/set_provider_organization.rb +49 -0
- data/app/graphql/masks/server/manage/mutations/sign_in_policy_mutation.rb +57 -0
- data/app/graphql/masks/server/manage/mutations/sign_out_actor.rb +24 -0
- data/app/graphql/masks/server/manage/mutations/sign_out_device.rb +24 -0
- data/app/graphql/masks/server/manage/mutations/stage_signing_key.rb +27 -0
- data/app/graphql/masks/server/manage/mutations/suspend_actor.rb +27 -0
- data/app/graphql/masks/server/manage/mutations/test_event_stream.rb +33 -0
- data/app/graphql/masks/server/manage/mutations/test_sender.rb +31 -0
- data/app/graphql/masks/server/manage/mutations/unblock_device.rb +24 -0
- data/app/graphql/masks/server/manage/mutations/unblock_devices.rb +31 -0
- data/app/graphql/masks/server/manage/mutations/update_actor.rb +49 -0
- data/app/graphql/masks/server/manage/mutations/update_client.rb +105 -0
- data/app/graphql/masks/server/manage/mutations/update_domain_claim.rb +26 -0
- data/app/graphql/masks/server/manage/mutations/update_event_stream.rb +37 -0
- data/app/graphql/masks/server/manage/mutations/update_group.rb +24 -0
- data/app/graphql/masks/server/manage/mutations/update_mail_template.rb +37 -0
- data/app/graphql/masks/server/manage/mutations/update_organization.rb +34 -0
- data/app/graphql/masks/server/manage/mutations/update_provider.rb +87 -0
- data/app/graphql/masks/server/manage/mutations/update_sender.rb +35 -0
- data/app/graphql/masks/server/manage/mutations/update_sign_in_policy.rb +28 -0
- data/app/graphql/masks/server/manage/mutations/update_tenant.rb +122 -0
- data/app/graphql/masks/server/manage/mutations/upload_avatar.rb +27 -0
- data/app/graphql/masks/server/manage/mutations/upload_tenant_logo.rb +23 -0
- data/app/graphql/masks/server/manage/mutations/verify_email.rb +26 -0
- data/app/graphql/masks/server/manage/sources/membership_counts.rb +29 -0
- data/app/graphql/masks/server/manage/types/activity_day_type.rb +12 -0
- data/app/graphql/masks/server/manage/types/actor_type.rb +151 -0
- data/app/graphql/masks/server/manage/types/app_preset_type.rb +18 -0
- data/app/graphql/masks/server/manage/types/app_setting_type.rb +14 -0
- data/app/graphql/masks/server/manage/types/avatars_type.rb +13 -0
- data/app/graphql/masks/server/manage/types/base_object.rb +10 -0
- data/app/graphql/masks/server/manage/types/client_type.rb +121 -0
- data/app/graphql/masks/server/manage/types/connection_type.rb +37 -0
- data/app/graphql/masks/server/manage/types/consent_type.rb +30 -0
- data/app/graphql/masks/server/manage/types/delegation_type.rb +32 -0
- data/app/graphql/masks/server/manage/types/device_type.rb +35 -0
- data/app/graphql/masks/server/manage/types/domain_claim_type.rb +17 -0
- data/app/graphql/masks/server/manage/types/event_action_type.rb +20 -0
- data/app/graphql/masks/server/manage/types/event_stream_type.rb +21 -0
- data/app/graphql/masks/server/manage/types/event_type.rb +27 -0
- data/app/graphql/masks/server/manage/types/group_type.rb +25 -0
- data/app/graphql/masks/server/manage/types/invitation_outcome_type.rb +18 -0
- data/app/graphql/masks/server/manage/types/ldap_credential_type.rb +20 -0
- data/app/graphql/masks/server/manage/types/mail_preview_type.rb +19 -0
- data/app/graphql/masks/server/manage/types/mail_template_type.rb +20 -0
- data/app/graphql/masks/server/manage/types/membership_type.rb +24 -0
- data/app/graphql/masks/server/manage/types/mutation_type.rb +103 -0
- data/app/graphql/masks/server/manage/types/namespace_type.rb +26 -0
- data/app/graphql/masks/server/manage/types/organization_type.rb +70 -0
- data/app/graphql/masks/server/manage/types/passkey_type.rb +22 -0
- data/app/graphql/masks/server/manage/types/provider_preset_type.rb +21 -0
- data/app/graphql/masks/server/manage/types/provider_type.rb +108 -0
- data/app/graphql/masks/server/manage/types/provisioning_token_type.rb +18 -0
- data/app/graphql/masks/server/manage/types/query_type.rb +536 -0
- data/app/graphql/masks/server/manage/types/sender_field_type.rb +18 -0
- data/app/graphql/masks/server/manage/types/sender_service_type.rb +14 -0
- data/app/graphql/masks/server/manage/types/sender_type.rb +29 -0
- data/app/graphql/masks/server/manage/types/session_type.rb +19 -0
- data/app/graphql/masks/server/manage/types/sign_in_policy_type.rb +54 -0
- data/app/graphql/masks/server/manage/types/signing_key_type.rb +23 -0
- data/app/graphql/masks/server/manage/types/tally_type.rb +14 -0
- data/app/graphql/masks/server/manage/types/tenant_type.rb +64 -0
- data/app/graphql/masks/server/manage/types/token_type.rb +42 -0
- data/app/graphql/masks/server/manage/types/upload_type.rb +21 -0
- data/app/graphql/masks/server/manage_schema.rb +23 -0
- data/app/helpers/masks/server/account_helper.rb +59 -0
- data/app/helpers/masks/server/application_helper.rb +39 -0
- data/app/helpers/masks/server/avatars_helper.rb +20 -0
- data/app/helpers/masks/server/events_helper.rb +19 -0
- data/app/helpers/masks/server/scopes_helper.rb +15 -0
- data/app/jobs/masks/server/application_job.rb +7 -0
- data/app/jobs/masks/server/backchannel_logout_job.rb +38 -0
- data/app/jobs/masks/server/check_domain_claims_job.rb +31 -0
- data/app/jobs/masks/server/cleanup_job.rb +53 -0
- data/app/jobs/masks/server/client_logo_job.rb +20 -0
- data/app/jobs/masks/server/event_stream_job.rb +40 -0
- data/app/jobs/masks/server/idle_accounts_job.rb +14 -0
- data/app/jobs/masks/server/mail_delivery_job.rb +7 -0
- data/app/jobs/masks/server/notification_job.rb +17 -0
- data/app/jobs/masks/server/refresh_authenticators_job.rb +14 -0
- data/app/jobs/masks/server/refresh_saml_metadata_job.rb +24 -0
- data/app/jobs/masks/server/rotate_signing_keys_job.rb +37 -0
- data/app/jobs/masks/server/saml_logout_job.rb +38 -0
- data/app/jobs/masks/server/signal_job.rb +45 -0
- data/app/jobs/masks/server/text_job.rb +17 -0
- data/app/ldap/masks/server/ldap/ber.rb +202 -0
- data/app/ldap/masks/server/ldap/connection.rb +149 -0
- data/app/ldap/masks/server/ldap/directory.rb +175 -0
- data/app/ldap/masks/server/ldap/dn.rb +185 -0
- data/app/ldap/masks/server/ldap/entry.rb +30 -0
- data/app/ldap/masks/server/ldap/filter.rb +239 -0
- data/app/ldap/masks/server/ldap/gate.rb +169 -0
- data/app/ldap/masks/server/ldap/listener.rb +113 -0
- data/app/ldap/masks/server/ldap/protocol.rb +174 -0
- data/app/logins/masks/server/login_state.rb +153 -0
- data/app/logins/masks/server/login_states/app_access.rb +18 -0
- data/app/logins/masks/server/login_states/backup_code.rb +69 -0
- data/app/logins/masks/server/login_states/code_factor.rb +100 -0
- data/app/logins/masks/server/login_states/configure.rb +43 -0
- data/app/logins/masks/server/login_states/confirmation.rb +193 -0
- data/app/logins/masks/server/login_states/consent.rb +90 -0
- data/app/logins/masks/server/login_states/delegation.rb +172 -0
- data/app/logins/masks/server/login_states/email_code.rb +108 -0
- data/app/logins/masks/server/login_states/enrolment.rb +268 -0
- data/app/logins/masks/server/login_states/first_factor.rb +17 -0
- data/app/logins/masks/server/login_states/identifier.rb +48 -0
- data/app/logins/masks/server/login_states/inbox.rb +159 -0
- data/app/logins/masks/server/login_states/invitation.rb +80 -0
- data/app/logins/masks/server/login_states/one_time_password.rb +30 -0
- data/app/logins/masks/server/login_states/organization_choice.rb +108 -0
- data/app/logins/masks/server/login_states/passkey.rb +113 -0
- data/app/logins/masks/server/login_states/password.rb +40 -0
- data/app/logins/masks/server/login_states/password_reset.rb +88 -0
- data/app/logins/masks/server/login_states/provider.rb +181 -0
- data/app/logins/masks/server/login_states/risk_check.rb +79 -0
- data/app/logins/masks/server/login_states/second_factor.rb +55 -0
- data/app/logins/masks/server/login_states/signup.rb +351 -0
- data/app/logins/masks/server/login_states/suspension.rb +18 -0
- data/app/logins/masks/server/login_states/trusted_device.rb +84 -0
- data/app/mailers/masks/server/actor_mailer.rb +184 -0
- data/app/mailers/masks/server/application_mailer.rb +66 -0
- data/app/mailers/masks/server/sender_mailer.rb +13 -0
- data/app/models/concerns/masks/server/archivable.rb +22 -0
- data/app/models/concerns/masks/server/carries_authorization.rb +75 -0
- data/app/models/concerns/masks/server/mailed_link.rb +47 -0
- data/app/models/concerns/masks/server/paged.rb +18 -0
- data/app/models/concerns/masks/server/tenant_scoped.rb +13 -0
- data/app/models/masks/server/access_token.rb +69 -0
- data/app/models/masks/server/account_export.rb +144 -0
- data/app/models/masks/server/actor.rb +523 -0
- data/app/models/masks/server/addresses.rb +65 -0
- data/app/models/masks/server/app_preset.rb +251 -0
- data/app/models/masks/server/application_record.rb +17 -0
- data/app/models/masks/server/apps.rb +56 -0
- data/app/models/masks/server/authenticator.rb +57 -0
- data/app/models/masks/server/authenticator_app.rb +51 -0
- data/app/models/masks/server/authenticators.rb +78 -0
- data/app/models/masks/server/authorization.rb +200 -0
- data/app/models/masks/server/authorization_code.rb +32 -0
- data/app/models/masks/server/authorization_details.rb +235 -0
- data/app/models/masks/server/authorize_request.rb +57 -0
- data/app/models/masks/server/avatar.rb +52 -0
- data/app/models/masks/server/avatars.rb +99 -0
- data/app/models/masks/server/backchannel_logout.rb +67 -0
- data/app/models/masks/server/breached_passwords.rb +29 -0
- data/app/models/masks/server/client.rb +604 -0
- data/app/models/masks/server/client_assertion.rb +59 -0
- data/app/models/masks/server/client_keys.rb +130 -0
- data/app/models/masks/server/client_logo.rb +55 -0
- data/app/models/masks/server/client_metadata_document.rb +178 -0
- data/app/models/masks/server/code_factors.rb +103 -0
- data/app/models/masks/server/confirmation_code.rb +110 -0
- data/app/models/masks/server/confirmations.rb +51 -0
- data/app/models/masks/server/connection.rb +140 -0
- data/app/models/masks/server/consent.rb +70 -0
- data/app/models/masks/server/current.rb +8 -0
- data/app/models/masks/server/declared.rb +127 -0
- data/app/models/masks/server/delegation.rb +94 -0
- data/app/models/masks/server/device.rb +145 -0
- data/app/models/masks/server/device_factor.rb +39 -0
- data/app/models/masks/server/device_grant.rb +93 -0
- data/app/models/masks/server/domain_claim.rb +85 -0
- data/app/models/masks/server/email_verification.rb +22 -0
- data/app/models/masks/server/event.rb +251 -0
- data/app/models/masks/server/event_export.rb +73 -0
- data/app/models/masks/server/event_stream.rb +131 -0
- data/app/models/masks/server/exchange.rb +240 -0
- data/app/models/masks/server/federation/mcp.rb +29 -0
- data/app/models/masks/server/federation/oauth2.rb +27 -0
- data/app/models/masks/server/federation/oidc.rb +146 -0
- data/app/models/masks/server/federation/protocol.rb +114 -0
- data/app/models/masks/server/federation/saml.rb +120 -0
- data/app/models/masks/server/forward_code.rb +13 -0
- data/app/models/masks/server/forward_session.rb +14 -0
- data/app/models/masks/server/forwarded.rb +40 -0
- data/app/models/masks/server/group.rb +31 -0
- data/app/models/masks/server/group_member.rb +10 -0
- data/app/models/masks/server/handshake.rb +172 -0
- data/app/models/masks/server/help_requests.rb +50 -0
- data/app/models/masks/server/identicon.rb +71 -0
- data/app/models/masks/server/idle_accounts.rb +96 -0
- data/app/models/masks/server/initial_access_token.rb +14 -0
- data/app/models/masks/server/initials.rb +75 -0
- data/app/models/masks/server/invitation.rb +29 -0
- data/app/models/masks/server/invitations.rb +24 -0
- data/app/models/masks/server/issuer.rb +205 -0
- data/app/models/masks/server/journey.rb +97 -0
- data/app/models/masks/server/ldap_credential.rb +51 -0
- data/app/models/masks/server/linking.rb +81 -0
- data/app/models/masks/server/locales.rb +55 -0
- data/app/models/masks/server/localized.rb +42 -0
- data/app/models/masks/server/locked_out.rb +30 -0
- data/app/models/masks/server/login.rb +469 -0
- data/app/models/masks/server/logout.rb +99 -0
- data/app/models/masks/server/mail_previews.rb +90 -0
- data/app/models/masks/server/mail_template.rb +77 -0
- data/app/models/masks/server/manage_roles.rb +48 -0
- data/app/models/masks/server/master_key.rb +44 -0
- data/app/models/masks/server/members.rb +166 -0
- data/app/models/masks/server/membership.rb +105 -0
- data/app/models/masks/server/namespace.rb +85 -0
- data/app/models/masks/server/notifications.rb +156 -0
- data/app/models/masks/server/organization.rb +74 -0
- data/app/models/masks/server/outbound.rb +165 -0
- data/app/models/masks/server/passkey.rb +83 -0
- data/app/models/masks/server/password_reset.rb +30 -0
- data/app/models/masks/server/passwords.rb +21 -0
- data/app/models/masks/server/pending_handshake.rb +36 -0
- data/app/models/masks/server/pending_login.rb +23 -0
- data/app/models/masks/server/pending_request.rb +69 -0
- data/app/models/masks/server/pictures.rb +84 -0
- data/app/models/masks/server/presented_token.rb +106 -0
- data/app/models/masks/server/proof.rb +170 -0
- data/app/models/masks/server/proof_of_work.rb +43 -0
- data/app/models/masks/server/provider.rb +576 -0
- data/app/models/masks/server/provider_domains.rb +9 -0
- data/app/models/masks/server/provider_preset.rb +234 -0
- data/app/models/masks/server/provisioning_token.rb +35 -0
- data/app/models/masks/server/pushed_request.rb +39 -0
- data/app/models/masks/server/received_signal.rb +131 -0
- data/app/models/masks/server/recoveries.rb +40 -0
- data/app/models/masks/server/refresh_token.rb +19 -0
- data/app/models/masks/server/relying_party.rb +76 -0
- data/app/models/masks/server/replay.rb +11 -0
- data/app/models/masks/server/request_object.rb +84 -0
- data/app/models/masks/server/resource_metadata.rb +70 -0
- data/app/models/masks/server/risk.rb +110 -0
- data/app/models/masks/server/saml_identity/farewells.rb +51 -0
- data/app/models/masks/server/saml_identity/logout_reply.rb +31 -0
- data/app/models/masks/server/saml_identity/logout_request.rb +51 -0
- data/app/models/masks/server/saml_identity/message.rb +171 -0
- data/app/models/masks/server/saml_identity/metadata.rb +43 -0
- data/app/models/masks/server/saml_identity/request.rb +57 -0
- data/app/models/masks/server/saml_identity/response.rb +137 -0
- data/app/models/masks/server/saml_identity/sign_off.rb +46 -0
- data/app/models/masks/server/saml_identity.rb +87 -0
- data/app/models/masks/server/saml_participation.rb +35 -0
- data/app/models/masks/server/scim/directory.rb +57 -0
- data/app/models/masks/server/scim/filter.rb +124 -0
- data/app/models/masks/server/scim/group.rb +142 -0
- data/app/models/masks/server/scim/organization_directory.rb +70 -0
- data/app/models/masks/server/scim/user.rb +149 -0
- data/app/models/masks/server/scim.rb +41 -0
- data/app/models/masks/server/scopes.rb +128 -0
- data/app/models/masks/server/sector_identifier.rb +50 -0
- data/app/models/masks/server/sender.rb +173 -0
- data/app/models/masks/server/senders/click_send.rb +21 -0
- data/app/models/masks/server/senders/infobip.rb +34 -0
- data/app/models/masks/server/senders/mail.rb +36 -0
- data/app/models/masks/server/senders/message_bird.rb +20 -0
- data/app/models/masks/server/senders/plivo.rb +19 -0
- data/app/models/masks/server/senders/sinch.rb +22 -0
- data/app/models/masks/server/senders/sms.rb +76 -0
- data/app/models/masks/server/senders/sms_log.rb +19 -0
- data/app/models/masks/server/senders/smtp.rb +60 -0
- data/app/models/masks/server/senders/sns.rb +72 -0
- data/app/models/masks/server/senders/telnyx.rb +18 -0
- data/app/models/masks/server/senders/twilio.rb +21 -0
- data/app/models/masks/server/senders/vonage.rb +25 -0
- data/app/models/masks/server/session.rb +134 -0
- data/app/models/masks/server/sign_in_approval.rb +70 -0
- data/app/models/masks/server/sign_in_policy.rb +202 -0
- data/app/models/masks/server/signal_stream.rb +147 -0
- data/app/models/masks/server/signals.rb +72 -0
- data/app/models/masks/server/signing_key.rb +112 -0
- data/app/models/masks/server/single_sign_on.rb +262 -0
- data/app/models/masks/server/subject.rb +14 -0
- data/app/models/masks/server/subjects.rb +39 -0
- data/app/models/masks/server/tenant.rb +476 -0
- data/app/models/masks/server/tenant_logo.rb +44 -0
- data/app/models/masks/server/texting.rb +16 -0
- data/app/models/masks/server/themes.rb +64 -0
- data/app/models/masks/server/token.rb +183 -0
- data/app/models/masks/server/user_codes.rb +32 -0
- data/app/models/masks/server/verifications.rb +26 -0
- data/app/policies/masks/server/authorization_policy.rb +55 -0
- data/app/policies/masks/server/client_policy.rb +21 -0
- data/app/policies/masks/server/device_policy.rb +22 -0
- data/app/policies/masks/server/exchange_policy.rb +155 -0
- data/app/policies/masks/server/grant_checks.rb +45 -0
- data/app/policies/masks/server/policy.rb +64 -0
- data/app/views/layouts/masks/server/application.html.erb +40 -0
- data/app/views/layouts/masks/server/mailer.html.erb +263 -0
- data/app/views/layouts/masks/server/mailer.text.erb +7 -0
- data/app/views/layouts/masks/server/manage.html.erb +22 -0
- data/app/views/masks/server/account/_activity.html.erb +44 -0
- data/app/views/masks/server/account/_address.html.erb +42 -0
- data/app/views/masks/server/account/_approve.html.erb +56 -0
- data/app/views/masks/server/account/_apps.html.erb +129 -0
- data/app/views/masks/server/account/_delete.html.erb +40 -0
- data/app/views/masks/server/account/_devices.html.erb +57 -0
- data/app/views/masks/server/account/_export.html.erb +29 -0
- data/app/views/masks/server/account/_head.html.erb +58 -0
- data/app/views/masks/server/account/_info.html.erb +81 -0
- data/app/views/masks/server/account/_launcher.html.erb +18 -0
- data/app/views/masks/server/account/_organizations.html.erb +171 -0
- data/app/views/masks/server/account/_signing_in.html.erb +339 -0
- data/app/views/masks/server/account/index.html.erb +41 -0
- data/app/views/masks/server/actor_mailer/_action.html.erb +18 -0
- data/app/views/masks/server/actor_mailer/_message.html.erb +7 -0
- data/app/views/masks/server/actor_mailer/_message.text.erb +1 -0
- data/app/views/masks/server/actor_mailer/approval_requested.html.erb +7 -0
- data/app/views/masks/server/actor_mailer/approval_requested.text.erb +7 -0
- data/app/views/masks/server/actor_mailer/approved.html.erb +7 -0
- data/app/views/masks/server/actor_mailer/approved.text.erb +7 -0
- data/app/views/masks/server/actor_mailer/confirmation_code.html.erb +9 -0
- data/app/views/masks/server/actor_mailer/confirmation_code.text.erb +7 -0
- data/app/views/masks/server/actor_mailer/email_verification.html.erb +11 -0
- data/app/views/masks/server/actor_mailer/email_verification.text.erb +7 -0
- data/app/views/masks/server/actor_mailer/idle.html.erb +9 -0
- data/app/views/masks/server/actor_mailer/idle.text.erb +9 -0
- data/app/views/masks/server/actor_mailer/invitation.html.erb +19 -0
- data/app/views/masks/server/actor_mailer/invitation.text.erb +13 -0
- data/app/views/masks/server/actor_mailer/notification.html.erb +20 -0
- data/app/views/masks/server/actor_mailer/notification.text.erb +15 -0
- data/app/views/masks/server/actor_mailer/organization_invitation.html.erb +11 -0
- data/app/views/masks/server/actor_mailer/organization_invitation.text.erb +11 -0
- data/app/views/masks/server/actor_mailer/password_reset.html.erb +15 -0
- data/app/views/masks/server/actor_mailer/password_reset.text.erb +11 -0
- data/app/views/masks/server/actor_mailer/recovery_requested.html.erb +7 -0
- data/app/views/masks/server/actor_mailer/recovery_requested.text.erb +7 -0
- data/app/views/masks/server/application/_flashes.html.erb +8 -0
- data/app/views/masks/server/application/_person.html.erb +27 -0
- data/app/views/masks/server/authorize/error.html.erb +12 -0
- data/app/views/masks/server/device_verifications/approved.html.erb +8 -0
- data/app/views/masks/server/device_verifications/show.html.erb +23 -0
- data/app/views/masks/server/handshakes/refused.html.erb +20 -0
- data/app/views/masks/server/handshakes/show.html.erb +141 -0
- data/app/views/masks/server/links/expired.html.erb +10 -0
- data/app/views/masks/server/links/verified.html.erb +8 -0
- data/app/views/masks/server/logins/_accept_invitation.html.erb +31 -0
- data/app/views/masks/server/logins/_add_phone.html.erb +14 -0
- data/app/views/masks/server/logins/_awaiting_approval.html.erb +7 -0
- data/app/views/masks/server/logins/_backup_code.html.erb +23 -0
- data/app/views/masks/server/logins/_choose_organization.html.erb +21 -0
- data/app/views/masks/server/logins/_code_form.html.erb +12 -0
- data/app/views/masks/server/logins/_confirm_email.html.erb +19 -0
- data/app/views/masks/server/logins/_confirm_head.html.erb +12 -0
- data/app/views/masks/server/logins/_confirm_phone.html.erb +16 -0
- data/app/views/masks/server/logins/_consent.html.erb +109 -0
- data/app/views/masks/server/logins/_email_code.html.erb +7 -0
- data/app/views/masks/server/logins/_enrol.html.erb +103 -0
- data/app/views/masks/server/logins/_enrol_code_form.html.erb +9 -0
- data/app/views/masks/server/logins/_first_factor.html.erb +41 -0
- data/app/views/masks/server/logins/_head.html.erb +15 -0
- data/app/views/masks/server/logins/_header.html.erb +3 -0
- data/app/views/masks/server/logins/_hint.html.erb +6 -0
- data/app/views/masks/server/logins/_identified.html.erb +6 -0
- data/app/views/masks/server/logins/_identify.html.erb +24 -0
- data/app/views/masks/server/logins/_prove_email.html.erb +12 -0
- data/app/views/masks/server/logins/_providers.html.erb +21 -0
- data/app/views/masks/server/logins/_resend.html.erb +5 -0
- data/app/views/masks/server/logins/_reset_password.html.erb +23 -0
- data/app/views/masks/server/logins/_second_factor.html.erb +102 -0
- data/app/views/masks/server/logins/_setup_configure.html.erb +32 -0
- data/app/views/masks/server/logins/_signup.html.erb +85 -0
- data/app/views/masks/server/logins/_signup_credentials.html.erb +54 -0
- data/app/views/masks/server/logins/_signup_head.html.erb +20 -0
- data/app/views/masks/server/logins/_steps.html.erb +7 -0
- data/app/views/masks/server/logins/_warnings.html.erb +3 -0
- data/app/views/masks/server/logins/show.html.erb +14 -0
- data/app/views/masks/server/manage/index.html.erb +1 -0
- data/app/views/masks/server/refusals/show.html.erb +16 -0
- data/app/views/masks/server/saml/post.html.erb +16 -0
- data/app/views/masks/server/sender_mailer/trial.html.erb +1 -0
- data/app/views/masks/server/sender_mailer/trial.text.erb +1 -0
- data/app/views/masks/server/sessions/confirm.html.erb +29 -0
- data/config/initializers/fido_metadata.rb +5 -0
- data/config/initializers/inflections.rb +3 -0
- data/config/initializers/premailer.rb +7 -0
- data/config/initializers/rack_oauth2.rb +3 -0
- data/config/locales/de/account.yml +277 -0
- data/config/locales/de/actors.yml +8 -0
- data/config/locales/de/application.yml +6 -0
- data/config/locales/de/authorize.yml +7 -0
- data/config/locales/de/device_verifications.yml +15 -0
- data/config/locales/de/events.yml +189 -0
- data/config/locales/de/flashes.yml +164 -0
- data/config/locales/de/handshakes.yml +45 -0
- data/config/locales/de/links.yml +16 -0
- data/config/locales/de/logins.yml +272 -0
- data/config/locales/de/mailers.yml +135 -0
- data/config/locales/de/manage/activity.yml +31 -0
- data/config/locales/de/manage/actor.yml +125 -0
- data/config/locales/de/manage/actors.yml +78 -0
- data/config/locales/de/manage/api.yml +5 -0
- data/config/locales/de/manage/app.yml +24 -0
- data/config/locales/de/manage/client.yml +187 -0
- data/config/locales/de/manage/clients.yml +62 -0
- data/config/locales/de/manage/connections.yml +18 -0
- data/config/locales/de/manage/consents.yml +10 -0
- data/config/locales/de/manage/device.yml +30 -0
- data/config/locales/de/manage/devices.yml +59 -0
- data/config/locales/de/manage/directory.yml +5 -0
- data/config/locales/de/manage/domains.yml +28 -0
- data/config/locales/de/manage/emails.yml +30 -0
- data/config/locales/de/manage/event_labels.yml +5 -0
- data/config/locales/de/manage/events.yml +8 -0
- data/config/locales/de/manage/groups.yml +15 -0
- data/config/locales/de/manage/ldap.yml +35 -0
- data/config/locales/de/manage/mail_template.yml +18 -0
- data/config/locales/de/manage/messages.yml +11 -0
- data/config/locales/de/manage/namespaces.yml +14 -0
- data/config/locales/de/manage/organization.yml +132 -0
- data/config/locales/de/manage/organization_cell.yml +4 -0
- data/config/locales/de/manage/organization_headcount.yml +9 -0
- data/config/locales/de/manage/organizations.yml +31 -0
- data/config/locales/de/manage/pairing.yml +5 -0
- data/config/locales/de/manage/policies.yml +111 -0
- data/config/locales/de/manage/policy_rules.yml +73 -0
- data/config/locales/de/manage/presence.yml +26 -0
- data/config/locales/de/manage/providers.yml +156 -0
- data/config/locales/de/manage/provisioning.yml +29 -0
- data/config/locales/de/manage/scopes_editor.yml +21 -0
- data/config/locales/de/manage/senders.yml +43 -0
- data/config/locales/de/manage/settings.yml +147 -0
- data/config/locales/de/manage/settings_shell.yml +15 -0
- data/config/locales/de/manage/streams.yml +45 -0
- data/config/locales/de/manage/tokens.yml +21 -0
- data/config/locales/de/manage/ui.yml +23 -0
- data/config/locales/de/notifications.yml +15 -0
- data/config/locales/de/refusals.yml +16 -0
- data/config/locales/de/saml.yml +8 -0
- data/config/locales/de/scopes.yml +20 -0
- data/config/locales/de/senders.yml +12 -0
- data/config/locales/de/sessions.yml +10 -0
- data/config/locales/en/account.yml +278 -0
- data/config/locales/en/actors.yml +8 -0
- data/config/locales/en/application.yml +6 -0
- data/config/locales/en/authorize.yml +7 -0
- data/config/locales/en/device_verifications.yml +15 -0
- data/config/locales/en/events.yml +189 -0
- data/config/locales/en/flashes.yml +164 -0
- data/config/locales/en/handshakes.yml +45 -0
- data/config/locales/en/links.yml +16 -0
- data/config/locales/en/logins.yml +272 -0
- data/config/locales/en/mailers.yml +135 -0
- data/config/locales/en/manage/activity.yml +31 -0
- data/config/locales/en/manage/actor.yml +125 -0
- data/config/locales/en/manage/actors.yml +78 -0
- data/config/locales/en/manage/api.yml +5 -0
- data/config/locales/en/manage/app.yml +24 -0
- data/config/locales/en/manage/client.yml +187 -0
- data/config/locales/en/manage/clients.yml +62 -0
- data/config/locales/en/manage/connections.yml +18 -0
- data/config/locales/en/manage/consents.yml +10 -0
- data/config/locales/en/manage/device.yml +30 -0
- data/config/locales/en/manage/devices.yml +59 -0
- data/config/locales/en/manage/directory.yml +5 -0
- data/config/locales/en/manage/domains.yml +28 -0
- data/config/locales/en/manage/emails.yml +30 -0
- data/config/locales/en/manage/event_labels.yml +5 -0
- data/config/locales/en/manage/events.yml +8 -0
- data/config/locales/en/manage/groups.yml +15 -0
- data/config/locales/en/manage/ldap.yml +35 -0
- data/config/locales/en/manage/mail_template.yml +18 -0
- data/config/locales/en/manage/messages.yml +11 -0
- data/config/locales/en/manage/namespaces.yml +14 -0
- data/config/locales/en/manage/organization.yml +132 -0
- data/config/locales/en/manage/organization_cell.yml +4 -0
- data/config/locales/en/manage/organization_headcount.yml +9 -0
- data/config/locales/en/manage/organizations.yml +31 -0
- data/config/locales/en/manage/pairing.yml +5 -0
- data/config/locales/en/manage/policies.yml +111 -0
- data/config/locales/en/manage/policy_rules.yml +73 -0
- data/config/locales/en/manage/presence.yml +26 -0
- data/config/locales/en/manage/providers.yml +156 -0
- data/config/locales/en/manage/provisioning.yml +29 -0
- data/config/locales/en/manage/scopes_editor.yml +21 -0
- data/config/locales/en/manage/senders.yml +43 -0
- data/config/locales/en/manage/settings.yml +147 -0
- data/config/locales/en/manage/settings_shell.yml +15 -0
- data/config/locales/en/manage/streams.yml +45 -0
- data/config/locales/en/manage/tokens.yml +21 -0
- data/config/locales/en/manage/ui.yml +23 -0
- data/config/locales/en/notifications.yml +15 -0
- data/config/locales/en/refusals.yml +16 -0
- data/config/locales/en/saml.yml +8 -0
- data/config/locales/en/scopes.yml +20 -0
- data/config/locales/en/senders.yml +12 -0
- data/config/locales/en/sessions.yml +10 -0
- data/config/locales/es/account.yml +277 -0
- data/config/locales/es/actors.yml +8 -0
- data/config/locales/es/application.yml +6 -0
- data/config/locales/es/authorize.yml +7 -0
- data/config/locales/es/device_verifications.yml +15 -0
- data/config/locales/es/events.yml +189 -0
- data/config/locales/es/flashes.yml +164 -0
- data/config/locales/es/handshakes.yml +45 -0
- data/config/locales/es/links.yml +16 -0
- data/config/locales/es/logins.yml +272 -0
- data/config/locales/es/mailers.yml +135 -0
- data/config/locales/es/manage/activity.yml +31 -0
- data/config/locales/es/manage/actor.yml +125 -0
- data/config/locales/es/manage/actors.yml +78 -0
- data/config/locales/es/manage/api.yml +5 -0
- data/config/locales/es/manage/app.yml +24 -0
- data/config/locales/es/manage/client.yml +187 -0
- data/config/locales/es/manage/clients.yml +62 -0
- data/config/locales/es/manage/connections.yml +18 -0
- data/config/locales/es/manage/consents.yml +10 -0
- data/config/locales/es/manage/device.yml +30 -0
- data/config/locales/es/manage/devices.yml +59 -0
- data/config/locales/es/manage/directory.yml +5 -0
- data/config/locales/es/manage/domains.yml +28 -0
- data/config/locales/es/manage/emails.yml +30 -0
- data/config/locales/es/manage/event_labels.yml +5 -0
- data/config/locales/es/manage/events.yml +8 -0
- data/config/locales/es/manage/groups.yml +15 -0
- data/config/locales/es/manage/ldap.yml +35 -0
- data/config/locales/es/manage/mail_template.yml +18 -0
- data/config/locales/es/manage/messages.yml +11 -0
- data/config/locales/es/manage/namespaces.yml +14 -0
- data/config/locales/es/manage/organization.yml +132 -0
- data/config/locales/es/manage/organization_cell.yml +4 -0
- data/config/locales/es/manage/organization_headcount.yml +9 -0
- data/config/locales/es/manage/organizations.yml +31 -0
- data/config/locales/es/manage/pairing.yml +5 -0
- data/config/locales/es/manage/policies.yml +111 -0
- data/config/locales/es/manage/policy_rules.yml +73 -0
- data/config/locales/es/manage/presence.yml +26 -0
- data/config/locales/es/manage/providers.yml +156 -0
- data/config/locales/es/manage/provisioning.yml +29 -0
- data/config/locales/es/manage/scopes_editor.yml +21 -0
- data/config/locales/es/manage/senders.yml +43 -0
- data/config/locales/es/manage/settings.yml +147 -0
- data/config/locales/es/manage/settings_shell.yml +15 -0
- data/config/locales/es/manage/streams.yml +45 -0
- data/config/locales/es/manage/tokens.yml +21 -0
- data/config/locales/es/manage/ui.yml +23 -0
- data/config/locales/es/notifications.yml +15 -0
- data/config/locales/es/refusals.yml +16 -0
- data/config/locales/es/saml.yml +8 -0
- data/config/locales/es/scopes.yml +20 -0
- data/config/locales/es/senders.yml +12 -0
- data/config/locales/es/sessions.yml +10 -0
- data/config/locales/fr/account.yml +277 -0
- data/config/locales/fr/actors.yml +8 -0
- data/config/locales/fr/application.yml +6 -0
- data/config/locales/fr/authorize.yml +7 -0
- data/config/locales/fr/device_verifications.yml +15 -0
- data/config/locales/fr/events.yml +189 -0
- data/config/locales/fr/flashes.yml +164 -0
- data/config/locales/fr/handshakes.yml +45 -0
- data/config/locales/fr/links.yml +16 -0
- data/config/locales/fr/logins.yml +272 -0
- data/config/locales/fr/mailers.yml +135 -0
- data/config/locales/fr/manage/activity.yml +31 -0
- data/config/locales/fr/manage/actor.yml +125 -0
- data/config/locales/fr/manage/actors.yml +78 -0
- data/config/locales/fr/manage/api.yml +5 -0
- data/config/locales/fr/manage/app.yml +24 -0
- data/config/locales/fr/manage/client.yml +187 -0
- data/config/locales/fr/manage/clients.yml +62 -0
- data/config/locales/fr/manage/connections.yml +18 -0
- data/config/locales/fr/manage/consents.yml +10 -0
- data/config/locales/fr/manage/device.yml +30 -0
- data/config/locales/fr/manage/devices.yml +59 -0
- data/config/locales/fr/manage/directory.yml +5 -0
- data/config/locales/fr/manage/domains.yml +28 -0
- data/config/locales/fr/manage/emails.yml +30 -0
- data/config/locales/fr/manage/event_labels.yml +5 -0
- data/config/locales/fr/manage/events.yml +8 -0
- data/config/locales/fr/manage/groups.yml +15 -0
- data/config/locales/fr/manage/ldap.yml +35 -0
- data/config/locales/fr/manage/mail_template.yml +18 -0
- data/config/locales/fr/manage/messages.yml +11 -0
- data/config/locales/fr/manage/namespaces.yml +14 -0
- data/config/locales/fr/manage/organization.yml +132 -0
- data/config/locales/fr/manage/organization_cell.yml +4 -0
- data/config/locales/fr/manage/organization_headcount.yml +9 -0
- data/config/locales/fr/manage/organizations.yml +31 -0
- data/config/locales/fr/manage/pairing.yml +5 -0
- data/config/locales/fr/manage/policies.yml +111 -0
- data/config/locales/fr/manage/policy_rules.yml +73 -0
- data/config/locales/fr/manage/presence.yml +26 -0
- data/config/locales/fr/manage/providers.yml +156 -0
- data/config/locales/fr/manage/provisioning.yml +29 -0
- data/config/locales/fr/manage/scopes_editor.yml +21 -0
- data/config/locales/fr/manage/senders.yml +43 -0
- data/config/locales/fr/manage/settings.yml +147 -0
- data/config/locales/fr/manage/settings_shell.yml +15 -0
- data/config/locales/fr/manage/streams.yml +45 -0
- data/config/locales/fr/manage/tokens.yml +21 -0
- data/config/locales/fr/manage/ui.yml +23 -0
- data/config/locales/fr/notifications.yml +15 -0
- data/config/locales/fr/refusals.yml +16 -0
- data/config/locales/fr/saml.yml +8 -0
- data/config/locales/fr/scopes.yml +20 -0
- data/config/locales/fr/senders.yml +12 -0
- data/config/locales/fr/sessions.yml +10 -0
- data/config/passwords/LICENSE +21 -0
- data/config/passwords/common.txt +46907 -0
- data/config/routes.rb +152 -0
- data/db/authenticators.yml +18 -0
- data/db/migrate/20260912000000_create_masks_schema.rb +425 -0
- data/db/migrate/20260913000000_create_adapters.rb +46 -0
- data/db/migrate/20260913010000_create_sign_in_policies.rb +44 -0
- data/db/migrate/20260913020000_add_signup_to_actors.rb +10 -0
- data/db/migrate/20260913030000_add_consent_required_to_clients.rb +5 -0
- data/db/migrate/20260913040000_remove_upstream_tokens.rb +9 -0
- data/db/migrate/20260913050000_add_role_to_providers.rb +23 -0
- data/db/migrate/20260913060000_add_protocols_to_providers.rb +19 -0
- data/db/migrate/20260913070000_add_saml_to_providers.rb +10 -0
- data/db/migrate/20260913080000_grant_identities_to_actors.rb +14 -0
- data/db/migrate/20260913090000_create_delegations.rb +56 -0
- data/db/migrate/20260914000000_add_keys_to_clients.rb +8 -0
- data/db/migrate/20260914010000_add_require_signed_request_object_to_clients.rb +5 -0
- data/db/migrate/20260914020000_add_provisioning_to_actors.rb +10 -0
- data/db/migrate/20260914030000_add_saml_to_clients.rb +17 -0
- data/db/migrate/20260921000000_create_client_logos.rb +30 -0
- data/db/migrate/20260921010000_add_setup_token_to_tenants.rb +5 -0
- data/db/migrate/20260926000000_add_code_factors_to_actors.rb +8 -0
- data/db/migrate/20260926010000_add_idle_accounts.rb +14 -0
- data/db/migrate/20260926020000_create_event_streams.rb +28 -0
- data/db/migrate/20260927000000_add_apps_require_second_factor_to_sign_in_policies.rb +5 -0
- data/db/migrate/20260927010000_add_session_policies.rb +14 -0
- data/db/migrate/20260927020000_create_organizations.rb +47 -0
- data/db/migrate/20260927030000_add_organizations_to_policies_and_providers.rb +12 -0
- data/db/migrate/20260927040000_add_organizations_to_events_and_streams.rb +8 -0
- data/db/migrate/20260927050000_create_domain_claims.rb +27 -0
- data/db/migrate/20260927060000_add_event_retention_to_tenants.rb +5 -0
- data/db/migrate/20260927070000_add_risk_to_sign_in_policies.rb +11 -0
- data/db/migrate/20260927110000_create_signal_streams.rb +31 -0
- data/db/migrate/20260927120000_add_custom_host_to_tenants.rb +6 -0
- data/db/migrate/20260927140500_add_first_factor_to_sessions.rb +6 -0
- data/db/migrate/20260927160000_add_invited_at_to_memberships.rb +15 -0
- data/db/migrate/20260927170000_grant_identities_to_actors_in_every_tenant.rb +17 -0
- data/db/migrate/20260927180000_move_directory_ids_to_memberships.rb +46 -0
- data/db/migrate/20261003120000_add_metadata_expires_at_to_clients.rb +5 -0
- data/db/migrate/20261003130000_create_mail_templates.rb +23 -0
- data/db/migrate/20261003140000_add_authorization_details.rb +7 -0
- data/db/migrate/20261004120000_add_remembering_to_consents.rb +7 -0
- data/db/migrate/20261004130000_add_receives_signals_to_providers.rb +5 -0
- data/db/migrate/20261010120000_add_root_to_tokens.rb +27 -0
- data/db/migrate/20261010130000_add_recovery_requested_at_to_actors.rb +6 -0
- data/db/migrate/20261010140000_create_groups.rb +38 -0
- data/db/migrate/20261010150000_add_token_lifetimes_to_clients.rb +6 -0
- data/db/migrate/20261010160000_create_tenant_logos.rb +27 -0
- data/db/migrate/20261011120000_index_pending_approvals.rb +5 -0
- data/db/migrate/20261011130000_add_key_rotation_days_to_tenants.rb +5 -0
- data/db/migrate/20261011140000_add_keys_derived_at_to_tenants.rb +5 -0
- data/db/migrate/20261011150000_add_proof_of_work_to_sign_in_policies.rb +5 -0
- data/db/migrate/20261011160000_add_password_required_to_sign_in_policies.rb +5 -0
- data/db/migrate/20261011170000_create_saml_participations.rb +30 -0
- data/db/migrate/20261011180000_rename_adapters_to_senders.rb +45 -0
- data/lib/generators/masks/server/install/install_generator.rb +116 -0
- data/lib/generators/masks/server/install/templates/masks_server.rb.tt +7 -0
- data/lib/masks/server/configuration.rb +134 -0
- data/lib/masks/server/engine.rb +60 -0
- data/lib/masks/server/forwarded_app.rb +19 -0
- data/lib/masks/server/forwarding.rb +29 -0
- data/lib/masks/server/host.rb +21 -0
- data/lib/masks/server/isolation.rb +34 -0
- data/lib/masks/server/journey_serializer.rb +17 -0
- data/lib/masks/server/schema_reference.rb +164 -0
- data/lib/masks/server/tenancy/job.rb +78 -0
- data/lib/masks/server/tenancy/middleware.rb +104 -0
- data/lib/masks/server/tenant_isolation.rb +40 -0
- data/lib/masks/server/tenant_key_provider.rb +76 -0
- data/lib/masks/server/version.rb +5 -0
- data/lib/masks/server.rb +116 -0
- data/lib/masks-server.rb +1 -0
- data/lib/puma/plugin/masks_ldap.rb +25 -0
- data/lib/rack/oauth2/server/token/extension/device_code.rb +40 -0
- data/lib/rack/oauth2/server/token/extension/token_exchange.rb +48 -0
- data/lib/tasks/masks.rake +22 -0
- data/public/masks-assets/assets/account-D46qDQCo.js +2 -0
- data/public/masks-assets/assets/account-D46qDQCo.js.map +1 -0
- data/public/masks-assets/assets/app-olx-5PkA.css +2 -0
- data/public/masks-assets/assets/console-CiuQ3qj0.css +1 -0
- data/public/masks-assets/assets/handshake-BYhhQ_X3.js +2 -0
- data/public/masks-assets/assets/handshake-BYhhQ_X3.js.map +1 -0
- data/public/masks-assets/assets/initial-D99AzFOd.js +3 -0
- data/public/masks-assets/assets/initial-D99AzFOd.js.map +1 -0
- data/public/masks-assets/assets/login-CNs1UpxJ.js +4 -0
- data/public/masks-assets/assets/login-CNs1UpxJ.js.map +1 -0
- data/public/masks-assets/assets/manage-Z3GmPDNQ.js +560 -0
- data/public/masks-assets/assets/manage-Z3GmPDNQ.js.map +1 -0
- data/public/masks-assets/assets/passkey-DIj_5LCY.js +2 -0
- data/public/masks-assets/assets/passkey-DIj_5LCY.js.map +1 -0
- data/public/masks-public/favicon.svg +27 -0
- data/public/masks-public/icon.png +0 -0
- data/public/masks-public/icon.svg +26 -0
- data/version.txt +1 -0
- metadata +1095 -0
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class DelegationType < BaseObject
|
|
6
|
+
field :id, ID, null: false
|
|
7
|
+
field :client, ClientType, null: false
|
|
8
|
+
field :actor, ActorType, null: false
|
|
9
|
+
field :connection, ConnectionType, null: false
|
|
10
|
+
field :provider, ProviderType, null: false
|
|
11
|
+
field :scopes, [ String ], null: false
|
|
12
|
+
field :consented_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
13
|
+
field :released_at, GraphQL::Types::ISO8601DateTime
|
|
14
|
+
field :revoked_at, GraphQL::Types::ISO8601DateTime
|
|
15
|
+
field :revoked_reason, String
|
|
16
|
+
|
|
17
|
+
def id
|
|
18
|
+
object.uuid
|
|
19
|
+
end
|
|
20
|
+
|
|
21
|
+
def provider
|
|
22
|
+
object.connection.provider
|
|
23
|
+
end
|
|
24
|
+
|
|
25
|
+
def scopes
|
|
26
|
+
Scopes.list(object.scopes)
|
|
27
|
+
end
|
|
28
|
+
end
|
|
29
|
+
end
|
|
30
|
+
end
|
|
31
|
+
end
|
|
32
|
+
end
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class DeviceType < BaseObject
|
|
6
|
+
field :id, ID, null: false
|
|
7
|
+
field :label, String, null: false
|
|
8
|
+
field :name, String
|
|
9
|
+
field :category, String, null: false
|
|
10
|
+
field :known, Boolean, null: false
|
|
11
|
+
field :user_agent, String
|
|
12
|
+
field :ip_address, String
|
|
13
|
+
field :last_seen_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
14
|
+
field :blocked_at, GraphQL::Types::ISO8601DateTime
|
|
15
|
+
field :created_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
16
|
+
|
|
17
|
+
field :actors, [ ActorType ], null: false
|
|
18
|
+
field :sessions, [ "Masks::Server::Manage::Types::SessionType" ], null: false
|
|
19
|
+
|
|
20
|
+
def known
|
|
21
|
+
object.known?
|
|
22
|
+
end
|
|
23
|
+
|
|
24
|
+
def actors
|
|
25
|
+
Actor.where(id: object.sessions.select(:actor_id)).order(:nickname)
|
|
26
|
+
end
|
|
27
|
+
|
|
28
|
+
def sessions
|
|
29
|
+
object.sessions.live.includes(:actor).order(created_at: :desc)
|
|
30
|
+
end
|
|
31
|
+
end
|
|
32
|
+
end
|
|
33
|
+
end
|
|
34
|
+
end
|
|
35
|
+
end
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class DomainClaimType < BaseObject
|
|
6
|
+
field :domain, ID, null: false
|
|
7
|
+
field :record_name, String, null: false, description: "The DNS name to publish a TXT record at."
|
|
8
|
+
field :record_value, String, null: false, description: "The TXT record's value."
|
|
9
|
+
field :verified_at, GraphQL::Types::ISO8601DateTime
|
|
10
|
+
field :checked_at, GraphQL::Types::ISO8601DateTime
|
|
11
|
+
field :missing_since, GraphQL::Types::ISO8601DateTime, description: "When a proven record stopped answering. The claim is released a week later."
|
|
12
|
+
field :provider, ProviderType, description: "The provider people with an address here are sent to."
|
|
13
|
+
end
|
|
14
|
+
end
|
|
15
|
+
end
|
|
16
|
+
end
|
|
17
|
+
end
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class EventActionType < BaseObject
|
|
6
|
+
field :action, String, null: false
|
|
7
|
+
field :label, String, null: false
|
|
8
|
+
|
|
9
|
+
def action
|
|
10
|
+
object
|
|
11
|
+
end
|
|
12
|
+
|
|
13
|
+
def label
|
|
14
|
+
I18n.t("events.actions.#{object}", default: object)
|
|
15
|
+
end
|
|
16
|
+
end
|
|
17
|
+
end
|
|
18
|
+
end
|
|
19
|
+
end
|
|
20
|
+
end
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class EventStreamType < BaseObject
|
|
6
|
+
field :key, ID, null: false
|
|
7
|
+
field :name, String, null: false
|
|
8
|
+
field :url, String, null: false
|
|
9
|
+
field :actions, [ String ], null: false
|
|
10
|
+
field :organization, "Masks::Server::Manage::Types::OrganizationType",
|
|
11
|
+
description: "When set, only this organization's events are sent."
|
|
12
|
+
field :last_delivered_at, GraphQL::Types::ISO8601DateTime
|
|
13
|
+
field :last_failure, String
|
|
14
|
+
field :archived_at, GraphQL::Types::ISO8601DateTime
|
|
15
|
+
field :created_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
16
|
+
field :updated_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
17
|
+
end
|
|
18
|
+
end
|
|
19
|
+
end
|
|
20
|
+
end
|
|
21
|
+
end
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class EventType < BaseObject
|
|
6
|
+
field :id, ID, null: false
|
|
7
|
+
field :action, String, null: false
|
|
8
|
+
field :label, String, null: false
|
|
9
|
+
field :created_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
10
|
+
field :ip_address, String
|
|
11
|
+
field :user_agent, String
|
|
12
|
+
field :details, GraphQL::Types::JSON, null: false
|
|
13
|
+
|
|
14
|
+
field :actor, ActorType
|
|
15
|
+
field :by, ActorType
|
|
16
|
+
field :client, ClientType
|
|
17
|
+
field :device, DeviceType
|
|
18
|
+
field :organization, "Masks::Server::Manage::Types::OrganizationType"
|
|
19
|
+
|
|
20
|
+
def label
|
|
21
|
+
I18n.t("events.actions.#{object.action}", default: object.action)
|
|
22
|
+
end
|
|
23
|
+
end
|
|
24
|
+
end
|
|
25
|
+
end
|
|
26
|
+
end
|
|
27
|
+
end
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class GroupType < BaseObject
|
|
6
|
+
description "A named set of people in the tenant. The groups claim lists the key of each group a person is in."
|
|
7
|
+
|
|
8
|
+
field :key, String, null: false
|
|
9
|
+
field :name, String, null: false
|
|
10
|
+
field :member_count, Integer, null: false
|
|
11
|
+
field :members, [ ActorType ], null: false
|
|
12
|
+
field :created_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
13
|
+
|
|
14
|
+
def member_count
|
|
15
|
+
object.members.count
|
|
16
|
+
end
|
|
17
|
+
|
|
18
|
+
def members
|
|
19
|
+
object.actors.order(:nickname)
|
|
20
|
+
end
|
|
21
|
+
end
|
|
22
|
+
end
|
|
23
|
+
end
|
|
24
|
+
end
|
|
25
|
+
end
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class InvitationOutcomeType < BaseObject
|
|
6
|
+
description "What inviting one address did."
|
|
7
|
+
|
|
8
|
+
field :email, String, null: false
|
|
9
|
+
field :outcome, String, null: false,
|
|
10
|
+
description: "invited, exists when an account already uses the address, or invalid when it is not an address."
|
|
11
|
+
field :delivered, Boolean, null: false
|
|
12
|
+
field :url, String, description: "The invitation link, when masks could not mail it."
|
|
13
|
+
field :actor, ActorType
|
|
14
|
+
end
|
|
15
|
+
end
|
|
16
|
+
end
|
|
17
|
+
end
|
|
18
|
+
end
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class LdapCredentialType < BaseObject
|
|
6
|
+
field :id, ID, null: false
|
|
7
|
+
field :label, String, null: false
|
|
8
|
+
field :bind_dn, String, null: false, description: "The DN an app binds as, under ou=services in this tenant's directory."
|
|
9
|
+
field :issued_by, ActorType
|
|
10
|
+
field :used_at, GraphQL::Types::ISO8601DateTime, description: "When an app last bound with it, to within five minutes."
|
|
11
|
+
field :created_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
12
|
+
|
|
13
|
+
def bind_dn
|
|
14
|
+
Ldap::Directory.new(Current.tenant).service_dn(object.label).to_s
|
|
15
|
+
end
|
|
16
|
+
end
|
|
17
|
+
end
|
|
18
|
+
end
|
|
19
|
+
end
|
|
20
|
+
end
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class MailPreviewType < BaseObject
|
|
6
|
+
field :key, ID, null: false
|
|
7
|
+
field :name, String, null: false
|
|
8
|
+
field :journey, String, null: false
|
|
9
|
+
field :heading, String, null: false
|
|
10
|
+
field :subject, String, null: false
|
|
11
|
+
field :from, String, null: false
|
|
12
|
+
field :to, String, null: false
|
|
13
|
+
field :html, String
|
|
14
|
+
field :text, String
|
|
15
|
+
end
|
|
16
|
+
end
|
|
17
|
+
end
|
|
18
|
+
end
|
|
19
|
+
end
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class MailTemplateType < BaseObject
|
|
6
|
+
description "The tenant's own template for one kind of email. masks still adds the button or code, how long it lasts, and the lines that keep a person safe."
|
|
7
|
+
|
|
8
|
+
field :kind, ID, null: false,
|
|
9
|
+
description: "Which email this changes, or `signature` for the closing lines every email ends with."
|
|
10
|
+
field :subject, String, description: "The subject line. Blank keeps the one masks writes."
|
|
11
|
+
field :message, String,
|
|
12
|
+
description: "The opening text, in place of the one masks writes. A blank line starts a new paragraph. Blank keeps the one masks writes."
|
|
13
|
+
field :placeholders, [ String ], null: false,
|
|
14
|
+
description: "The names this kind fills in when written as `{{name}}`."
|
|
15
|
+
field :updated_at, GraphQL::Types::ISO8601DateTime
|
|
16
|
+
end
|
|
17
|
+
end
|
|
18
|
+
end
|
|
19
|
+
end
|
|
20
|
+
end
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class MembershipType < BaseObject
|
|
6
|
+
field :actor, ActorType, null: false
|
|
7
|
+
field :organization, OrganizationType, null: false
|
|
8
|
+
field :role, String, null: false
|
|
9
|
+
field :pending, Boolean, null: false, description: "True until the person accepts. A pending membership grants nothing."
|
|
10
|
+
field :invited_by, ActorType
|
|
11
|
+
field :invited_as, String, description: "The address an invitation went to. Only that address can accept it."
|
|
12
|
+
field :provisioned, Boolean, null: false, description: "True when a directory added this member through SCIM."
|
|
13
|
+
field :external_id, String, description: "The id the organization's directory knows this member by."
|
|
14
|
+
field :invited_at, GraphQL::Types::ISO8601DateTime, description: "When the invitation was last sent."
|
|
15
|
+
field :expires_at, GraphQL::Types::ISO8601DateTime,
|
|
16
|
+
description: "When a pending invitation stops being accepted. Sending it again starts it over."
|
|
17
|
+
field :expired, Boolean, null: false, method: :expired?,
|
|
18
|
+
description: "True when the invitation can no longer be accepted."
|
|
19
|
+
field :created_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
20
|
+
end
|
|
21
|
+
end
|
|
22
|
+
end
|
|
23
|
+
end
|
|
24
|
+
end
|
|
@@ -0,0 +1,103 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class MutationType < BaseObject
|
|
6
|
+
field :create_actor, mutation: Mutations::CreateActor
|
|
7
|
+
field :invite_actors, mutation: Mutations::InviteActors
|
|
8
|
+
field :resend_invitation, mutation: Mutations::ResendInvitation
|
|
9
|
+
field :reset_password, mutation: Mutations::ResetPassword
|
|
10
|
+
field :verify_email, mutation: Mutations::VerifyEmail
|
|
11
|
+
field :update_actor, mutation: Mutations::UpdateActor
|
|
12
|
+
field :approve_actor, mutation: Mutations::ApproveActor
|
|
13
|
+
field :set_actor_scopes, mutation: Mutations::SetActorScopes
|
|
14
|
+
field :sign_out_actor, mutation: Mutations::SignOutActor
|
|
15
|
+
field :suspend_actor, mutation: Mutations::SuspendActor
|
|
16
|
+
field :restore_actor, mutation: Mutations::RestoreActor
|
|
17
|
+
field :delete_actor, mutation: Mutations::DeleteActor
|
|
18
|
+
field :issue_provisioning_token, mutation: Mutations::IssueProvisioningToken
|
|
19
|
+
field :revoke_provisioning_token, mutation: Mutations::RevokeProvisioningToken
|
|
20
|
+
field :issue_ldap_credential, mutation: Mutations::IssueLdapCredential
|
|
21
|
+
field :revoke_ldap_credential, mutation: Mutations::RevokeLdapCredential
|
|
22
|
+
field :generate_backup_codes, mutation: Mutations::GenerateBackupCodes
|
|
23
|
+
field :disable_authenticator, mutation: Mutations::DisableAuthenticator
|
|
24
|
+
field :reset_second_factors, mutation: Mutations::ResetSecondFactors
|
|
25
|
+
field :dismiss_recovery, mutation: Mutations::DismissRecovery
|
|
26
|
+
field :create_group, mutation: Mutations::CreateGroup
|
|
27
|
+
field :update_group, mutation: Mutations::UpdateGroup
|
|
28
|
+
field :delete_group, mutation: Mutations::DeleteGroup
|
|
29
|
+
field :add_group_member, mutation: Mutations::AddGroupMember
|
|
30
|
+
field :remove_group_member, mutation: Mutations::RemoveGroupMember
|
|
31
|
+
field :disable_code_factor, mutation: Mutations::DisableCodeFactor
|
|
32
|
+
field :revoke_passkey, mutation: Mutations::RevokePasskey
|
|
33
|
+
field :upload_avatar, mutation: Mutations::UploadAvatar
|
|
34
|
+
field :remove_avatar, mutation: Mutations::RemoveAvatar
|
|
35
|
+
field :upload_tenant_logo, mutation: Mutations::UploadTenantLogo
|
|
36
|
+
field :remove_tenant_logo, mutation: Mutations::RemoveTenantLogo
|
|
37
|
+
field :create_client, mutation: Mutations::CreateClient
|
|
38
|
+
field :add_app, mutation: Mutations::AddApp
|
|
39
|
+
field :create_saml_application, mutation: Mutations::CreateSamlApplication
|
|
40
|
+
field :read_saml_application_metadata, mutation: Mutations::ReadSamlApplicationMetadata
|
|
41
|
+
field :update_client, mutation: Mutations::UpdateClient
|
|
42
|
+
field :rotate_client_secret, mutation: Mutations::RotateClientSecret
|
|
43
|
+
field :archive_client, mutation: Mutations::ArchiveClient
|
|
44
|
+
field :restore_client, mutation: Mutations::RestoreClient
|
|
45
|
+
field :release_namespace, mutation: Mutations::ReleaseNamespace
|
|
46
|
+
field :discover_provider, mutation: Mutations::DiscoverProvider
|
|
47
|
+
field :read_saml_metadata, mutation: Mutations::ReadSamlMetadata
|
|
48
|
+
field :create_provider, mutation: Mutations::CreateProvider
|
|
49
|
+
field :update_provider, mutation: Mutations::UpdateProvider
|
|
50
|
+
field :archive_provider, mutation: Mutations::ArchiveProvider
|
|
51
|
+
field :restore_provider, mutation: Mutations::RestoreProvider
|
|
52
|
+
field :revoke_token, mutation: Mutations::RevokeToken
|
|
53
|
+
field :revoke_connection, mutation: Mutations::RevokeConnection
|
|
54
|
+
field :revoke_consent, mutation: Mutations::RevokeConsent
|
|
55
|
+
field :revoke_delegation, mutation: Mutations::RevokeDelegation
|
|
56
|
+
field :register_provider, mutation: Mutations::RegisterProvider
|
|
57
|
+
field :revoke_session, mutation: Mutations::RevokeSession
|
|
58
|
+
field :block_device, mutation: Mutations::BlockDevice
|
|
59
|
+
field :unblock_device, mutation: Mutations::UnblockDevice
|
|
60
|
+
field :block_devices, mutation: Mutations::BlockDevices
|
|
61
|
+
field :unblock_devices, mutation: Mutations::UnblockDevices
|
|
62
|
+
field :sign_out_device, mutation: Mutations::SignOutDevice
|
|
63
|
+
field :update_tenant, mutation: Mutations::UpdateTenant
|
|
64
|
+
field :create_sign_in_policy, mutation: Mutations::CreateSignInPolicy
|
|
65
|
+
field :update_sign_in_policy, mutation: Mutations::UpdateSignInPolicy
|
|
66
|
+
field :archive_sign_in_policy, mutation: Mutations::ArchiveSignInPolicy
|
|
67
|
+
field :restore_sign_in_policy, mutation: Mutations::RestoreSignInPolicy
|
|
68
|
+
field :create_sender, mutation: Mutations::CreateSender
|
|
69
|
+
field :update_sender, mutation: Mutations::UpdateSender
|
|
70
|
+
field :archive_sender, mutation: Mutations::ArchiveSender
|
|
71
|
+
field :restore_sender, mutation: Mutations::RestoreSender
|
|
72
|
+
field :test_sender, mutation: Mutations::TestSender
|
|
73
|
+
field :create_event_stream, mutation: Mutations::CreateEventStream
|
|
74
|
+
field :update_event_stream, mutation: Mutations::UpdateEventStream
|
|
75
|
+
field :update_mail_template, mutation: Mutations::UpdateMailTemplate
|
|
76
|
+
field :archive_event_stream, mutation: Mutations::ArchiveEventStream
|
|
77
|
+
field :restore_event_stream, mutation: Mutations::RestoreEventStream
|
|
78
|
+
field :rotate_event_stream_secret, mutation: Mutations::RotateEventStreamSecret
|
|
79
|
+
field :test_event_stream, mutation: Mutations::TestEventStream
|
|
80
|
+
field :create_organization, mutation: Mutations::CreateOrganization
|
|
81
|
+
field :update_organization, mutation: Mutations::UpdateOrganization
|
|
82
|
+
field :archive_organization, mutation: Mutations::ArchiveOrganization
|
|
83
|
+
field :restore_organization, mutation: Mutations::RestoreOrganization
|
|
84
|
+
field :add_member, mutation: Mutations::AddMember
|
|
85
|
+
field :set_member_role, mutation: Mutations::SetMemberRole
|
|
86
|
+
field :remove_member, mutation: Mutations::RemoveMember
|
|
87
|
+
field :resend_organization_invitation, mutation: Mutations::ResendOrganizationInvitation
|
|
88
|
+
field :set_provider_organization, mutation: Mutations::SetProviderOrganization
|
|
89
|
+
field :claim_domain, mutation: Mutations::ClaimDomain
|
|
90
|
+
field :check_domain, mutation: Mutations::CheckDomain
|
|
91
|
+
field :update_domain_claim, mutation: Mutations::UpdateDomainClaim
|
|
92
|
+
field :release_domain, mutation: Mutations::ReleaseDomain
|
|
93
|
+
field :serve_domain, mutation: Mutations::ServeDomain
|
|
94
|
+
field :export_events, mutation: Mutations::ExportEvents
|
|
95
|
+
field :stage_signing_key, mutation: Mutations::StageSigningKey
|
|
96
|
+
field :activate_signing_key, mutation: Mutations::ActivateSigningKey
|
|
97
|
+
field :discard_signing_key, mutation: Mutations::DiscardSigningKey
|
|
98
|
+
field :rotate_signing_key, mutation: Mutations::RotateSigningKey
|
|
99
|
+
end
|
|
100
|
+
end
|
|
101
|
+
end
|
|
102
|
+
end
|
|
103
|
+
end
|
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class NamespaceType < BaseObject
|
|
6
|
+
field :name, String, null: false
|
|
7
|
+
field :resource, String, null: false
|
|
8
|
+
field :client, ClientType
|
|
9
|
+
field :claimed_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
10
|
+
field :releasable, Boolean, null: false
|
|
11
|
+
field :scopes, [ String ], null: false
|
|
12
|
+
|
|
13
|
+
def releasable
|
|
14
|
+
object.releasable?
|
|
15
|
+
end
|
|
16
|
+
|
|
17
|
+
def scopes
|
|
18
|
+
ResourceMetadata.new(object.resource).descriptions.keys.select do |scope|
|
|
19
|
+
scope.start_with?(object.name)
|
|
20
|
+
end
|
|
21
|
+
end
|
|
22
|
+
end
|
|
23
|
+
end
|
|
24
|
+
end
|
|
25
|
+
end
|
|
26
|
+
end
|
|
@@ -0,0 +1,70 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class OrganizationType < BaseObject
|
|
6
|
+
field :uuid, ID, null: false
|
|
7
|
+
field :key, ID, null: false
|
|
8
|
+
field :name, String, null: false
|
|
9
|
+
field :roles, [ String ], null: false, description: "Every role a member can hold here, owner and member included."
|
|
10
|
+
field :members, [ "Masks::Server::Manage::Types::MembershipType" ], null: false
|
|
11
|
+
field :member_count, Integer, null: false, description: "Members who have accepted."
|
|
12
|
+
field :owner_count, Integer, null: false, description: "Members who have accepted and hold owner."
|
|
13
|
+
field :pending_count, Integer, null: false, description: "Invitations still open, neither accepted nor expired."
|
|
14
|
+
field :live_token_count, Integer, null: false,
|
|
15
|
+
description: "Live tokens issued for this organization. Archiving revokes them."
|
|
16
|
+
field :domains, [ DomainClaimType ], null: false,
|
|
17
|
+
description: "Domains claimed for this organization's providers, proven or not."
|
|
18
|
+
field :provisioning_tokens, [ ProvisioningTokenType ], null: false,
|
|
19
|
+
description: "Live provisioning tokens that reach only this organization."
|
|
20
|
+
field :sign_in_policy, SignInPolicyType, description: "The policy for signing in as a member, ahead of the app's and the tenant's."
|
|
21
|
+
field :providers, [ ProviderType ], null: false
|
|
22
|
+
field :events, [ EventType ], null: false, description: "The organization's most recent events."
|
|
23
|
+
field :archived_at, GraphQL::Types::ISO8601DateTime
|
|
24
|
+
field :created_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
25
|
+
|
|
26
|
+
def roles
|
|
27
|
+
object.role_list
|
|
28
|
+
end
|
|
29
|
+
|
|
30
|
+
def members
|
|
31
|
+
object.memberships.includes(:actor, :invited_by).joins(:actor).order("actors.nickname", "actors.email")
|
|
32
|
+
end
|
|
33
|
+
|
|
34
|
+
def providers
|
|
35
|
+
object.providers.active.order(:name)
|
|
36
|
+
end
|
|
37
|
+
|
|
38
|
+
def events
|
|
39
|
+
Masks::Server::Event.where(organization: object).newest_first.includes(:actor, :by, :client, :device)
|
|
40
|
+
.limit(Masks::Server::Event::LIMIT)
|
|
41
|
+
end
|
|
42
|
+
|
|
43
|
+
def member_count
|
|
44
|
+
dataloader.with(Sources::MembershipCounts, :members).load(object.id)
|
|
45
|
+
end
|
|
46
|
+
|
|
47
|
+
def owner_count
|
|
48
|
+
dataloader.with(Sources::MembershipCounts, :owners).load(object.id)
|
|
49
|
+
end
|
|
50
|
+
|
|
51
|
+
def pending_count
|
|
52
|
+
dataloader.with(Sources::MembershipCounts, :pending).load(object.id)
|
|
53
|
+
end
|
|
54
|
+
|
|
55
|
+
def live_token_count
|
|
56
|
+
object.tokens.live.count
|
|
57
|
+
end
|
|
58
|
+
|
|
59
|
+
def domains
|
|
60
|
+
Masks::Server::DomainClaim.where(provider: object.providers.active).includes(:provider).order(:domain)
|
|
61
|
+
end
|
|
62
|
+
|
|
63
|
+
def provisioning_tokens
|
|
64
|
+
Masks::Server::ProvisioningToken.live.where(organization: object).order(created_at: :desc)
|
|
65
|
+
end
|
|
66
|
+
end
|
|
67
|
+
end
|
|
68
|
+
end
|
|
69
|
+
end
|
|
70
|
+
end
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class PasskeyType < BaseObject
|
|
6
|
+
field :id, ID, null: false
|
|
7
|
+
field :label, String, null: false
|
|
8
|
+
field :aaguid, String
|
|
9
|
+
field :certification, String
|
|
10
|
+
field :compromise, String
|
|
11
|
+
field :user_verified, Boolean, null: false
|
|
12
|
+
field :last_used_at, GraphQL::Types::ISO8601DateTime
|
|
13
|
+
field :created_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
14
|
+
|
|
15
|
+
def certification
|
|
16
|
+
object.authenticator&.certification
|
|
17
|
+
end
|
|
18
|
+
end
|
|
19
|
+
end
|
|
20
|
+
end
|
|
21
|
+
end
|
|
22
|
+
end
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class ProviderPresetType < BaseObject
|
|
6
|
+
field :key, ID, null: false
|
|
7
|
+
field :name, String, null: false
|
|
8
|
+
field :protocol, String, null: false
|
|
9
|
+
field :asks, [ String ], null: false
|
|
10
|
+
field :needs, [ String ], null: false
|
|
11
|
+
field :defaults, GraphQL::Types::JSON, null: false
|
|
12
|
+
field :guide, String
|
|
13
|
+
field :trusts_email, Boolean, null: false
|
|
14
|
+
field :custom, Boolean, null: false, method: :custom?
|
|
15
|
+
field :delegated_scopes, [ String ], null: false
|
|
16
|
+
field :delegates, Boolean, null: false, method: :delegates?
|
|
17
|
+
end
|
|
18
|
+
end
|
|
19
|
+
end
|
|
20
|
+
end
|
|
21
|
+
end
|
|
@@ -0,0 +1,108 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class ProviderType < BaseObject
|
|
6
|
+
field :key, ID, null: false
|
|
7
|
+
field :name, String, null: false
|
|
8
|
+
field :protocol, String, null: false
|
|
9
|
+
field :preset, String
|
|
10
|
+
field :authorization_url, String
|
|
11
|
+
field :token_url, String
|
|
12
|
+
field :userinfo_url, String
|
|
13
|
+
field :client_id, String
|
|
14
|
+
field :emails_url, String
|
|
15
|
+
field :claims, GraphQL::Types::JSON, null: false
|
|
16
|
+
field :token_auth_method, String, null: false
|
|
17
|
+
field :response_mode, String
|
|
18
|
+
field :team_id, String
|
|
19
|
+
field :key_id, String
|
|
20
|
+
field :private_key_held, Boolean, null: false
|
|
21
|
+
field :callback_url, String, null: false
|
|
22
|
+
field :idp_entity_id, String
|
|
23
|
+
field :idp_sso_url, String
|
|
24
|
+
field :idp_certificates, String
|
|
25
|
+
field :metadata_url, String
|
|
26
|
+
field :metadata_fetched_at, GraphQL::Types::ISO8601DateTime
|
|
27
|
+
field :name_id_format, String
|
|
28
|
+
field :sp_entity_id, String
|
|
29
|
+
field :scopes, [ String ], null: false
|
|
30
|
+
field :authorize_params, GraphQL::Types::JSON, null: false
|
|
31
|
+
field :subject_claim, String, null: false
|
|
32
|
+
field :secret_held, Boolean, null: false
|
|
33
|
+
field :connections, Integer, null: false
|
|
34
|
+
field :signed_in, Integer, null: false
|
|
35
|
+
field :archived_at, GraphQL::Types::ISO8601DateTime
|
|
36
|
+
field :organization, "Masks::Server::Manage::Types::OrganizationType",
|
|
37
|
+
description: "The organization whose people sign in through this provider, or null for the whole tenant."
|
|
38
|
+
field :role_claim, String, description: "The claim that lists a person's groups. groups when null."
|
|
39
|
+
field :role_map, GraphQL::Types::JSON, null: false, description: "Groups mapped to organization roles. The first group a person holds wins."
|
|
40
|
+
field :unmapped_role, String, description: "The role for someone in none of the mapped groups. member when null."
|
|
41
|
+
field :created_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
42
|
+
|
|
43
|
+
field :issuer, String
|
|
44
|
+
field :jwks_uri, String
|
|
45
|
+
field :jwks_fetched_at, GraphQL::Types::ISO8601DateTime
|
|
46
|
+
field :role, String, null: false
|
|
47
|
+
field :trusts_email, Boolean, null: false
|
|
48
|
+
field :receives_signals, Boolean, null: false,
|
|
49
|
+
description: "Whether masks accepts the shared signals this provider sends to /ssf/events."
|
|
50
|
+
field :email_domains, [ String ], null: false
|
|
51
|
+
field :signup_scopes, [ String ], null: false
|
|
52
|
+
field :delegates, Boolean, null: false
|
|
53
|
+
field :delegated_scopes, [ String ], null: false
|
|
54
|
+
field :delegation_params, GraphQL::Types::JSON, null: false
|
|
55
|
+
field :delegation_scope, String, null: false
|
|
56
|
+
field :resource_url, String
|
|
57
|
+
field :registration_url, String
|
|
58
|
+
field :registered_at, GraphQL::Types::ISO8601DateTime
|
|
59
|
+
field :delegations, Integer, null: false
|
|
60
|
+
|
|
61
|
+
def scopes
|
|
62
|
+
object.scope_list
|
|
63
|
+
end
|
|
64
|
+
|
|
65
|
+
def email_domains
|
|
66
|
+
object.email_domain_list
|
|
67
|
+
end
|
|
68
|
+
|
|
69
|
+
def signup_scopes
|
|
70
|
+
Scopes.list(object.signup_scopes)
|
|
71
|
+
end
|
|
72
|
+
|
|
73
|
+
def secret_held
|
|
74
|
+
object.client_secret.present?
|
|
75
|
+
end
|
|
76
|
+
|
|
77
|
+
def sp_entity_id
|
|
78
|
+
object.saml? ? object.federation.entity_id : nil
|
|
79
|
+
end
|
|
80
|
+
|
|
81
|
+
def private_key_held
|
|
82
|
+
object.private_key.present?
|
|
83
|
+
end
|
|
84
|
+
|
|
85
|
+
def callback_url
|
|
86
|
+
object.callback_url
|
|
87
|
+
end
|
|
88
|
+
|
|
89
|
+
def connections
|
|
90
|
+
Masks::Server::Connection.live.where(provider_id: object.id).count
|
|
91
|
+
end
|
|
92
|
+
|
|
93
|
+
def delegated_scopes
|
|
94
|
+
object.delegated_scope_list
|
|
95
|
+
end
|
|
96
|
+
|
|
97
|
+
def delegations
|
|
98
|
+
Masks::Server::Delegation.live.joins(:connection).where(connections: { provider_id: object.id }).count
|
|
99
|
+
end
|
|
100
|
+
|
|
101
|
+
def signed_in
|
|
102
|
+
Masks::Server::Connection.live.where(provider_id: object.id).where.not(signed_in_at: nil).count
|
|
103
|
+
end
|
|
104
|
+
end
|
|
105
|
+
end
|
|
106
|
+
end
|
|
107
|
+
end
|
|
108
|
+
end
|
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
module Masks
|
|
2
|
+
module Server
|
|
3
|
+
module Manage
|
|
4
|
+
module Types
|
|
5
|
+
class ProvisioningTokenType < BaseObject
|
|
6
|
+
field :id, ID, null: false
|
|
7
|
+
field :label, String, null: false
|
|
8
|
+
field :issued_by, ActorType
|
|
9
|
+
field :organization, "Masks::Server::Manage::Types::OrganizationType",
|
|
10
|
+
description: "The one organization this token provisions into, or null for every account."
|
|
11
|
+
field :used_at, GraphQL::Types::ISO8601DateTime
|
|
12
|
+
field :expires_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
13
|
+
field :created_at, GraphQL::Types::ISO8601DateTime, null: false
|
|
14
|
+
end
|
|
15
|
+
end
|
|
16
|
+
end
|
|
17
|
+
end
|
|
18
|
+
end
|