@contember/engine-tenant-api 1.3.5 → 1.4.0-alpha.1

package/src/model/service/idp/IDPManager.ts

@@ -2,7 +2,7 @@ import { Response, ResponseError, ResponseOk } from '../../utils/Response'
 import { AddIdpErrorCode, DisableIdpErrorCode, EnableIdpErrorCode, UpdateIdpErrorCode } from '../../../schema'
 import { DatabaseContext } from '../../utils'
 import { IdentityProviderData } from '../../type'
-import { IdentityProviderBySlugQuery } from '../../queries'
+import { IdentityProviderBySlugQuery, IdentityProvidersQuery } from '../../queries'
 import { CreateIdpCommand } from '../../commands/idp/CreateIdpCommand'
 import { IDPHandlerRegistry } from './IDPHandlerRegistry'
 import { IdentityProviderNotFoundError } from './IdentityProviderNotFoundError'
@@ -10,6 +10,7 @@ import { InvalidIDPConfigurationError } from './InvalidIDPConfigurationError'
 import { DisableIdpCommand } from '../../commands/idp/DisableIdpCommand'
 import { EnableIdpCommand } from '../../commands/idp/EnableIdpCommand'
 import { UpdateIdpCommand, UpdateIdpData } from '../../commands/idp/UpdateIdpCommand'
+import { IdentityProviderDto } from '../../queries/idp/types'
 
 export class IDPManager {
 	constructor(
@@ -68,18 +69,38 @@ export class IDPManager {
 		})
 	}
 
-	public async updateIDP(db: DatabaseContext, slug: string, data: UpdateIdpData): Promise<UpdateIDPResponse> {
+	public async updateIDP(db: DatabaseContext, slug: string, data: UpdateIdpData, mergeConfiguration: boolean): Promise<UpdateIDPResponse> {
 		return await db.transaction(async db => {
 			const existing = await db.queryHandler.fetch(new IdentityProviderBySlugQuery(slug))
 			if (!existing) {
 				return new ResponseError('NOT_FOUND', `IDP ${slug} not found`)
 			}
+
+			const newConfiguration = (() => {
+				if (!data.configuration) {
+					return existing.configuration
+				}
+				if (!mergeConfiguration) {
+					return data.configuration
+				}
+
+				const newConfiguration = { ...existing.configuration }
+				for (const [key, value] of Object.entries(data.configuration)) {
+					if (value === null) {
+						delete newConfiguration[key]
+					} else {
+						newConfiguration[key] = value
+					}
+				}
+
+				return newConfiguration
+			})()
+
 			try {
 				const type = data.type ?? existing.type
-				const configuration = data.configuration ?? existing.configuration
 				const providerService = this.idpRegistry.getHandler(type)
 				if (data.configuration !== undefined || type !== existing.type) {
-					providerService.validateConfiguration(configuration)
+					providerService.validateConfiguration(newConfiguration)
 				}
 			} catch (e) {
 				if (e instanceof InvalidIDPConfigurationError) {
@@ -87,10 +108,27 @@ export class IDPManager {
 				}
 				throw e
 			}
-			await db.commandBus.execute(new UpdateIdpCommand(existing.id, data))
+
+			await db.commandBus.execute(new UpdateIdpCommand(existing.id, {
+				...data,
+				configuration: data.configuration ? newConfiguration : undefined,
+			}))
+
 			return new ResponseOk(null)
 		})
 	}
+
+	public async listIDP(db: DatabaseContext): Promise<IdentityProviderDto[]> {
+		const result = await db.queryHandler.fetch(new IdentityProvidersQuery())
+		return result.map(it => {
+			const providerService = this.idpRegistry.getHandlerOrNull(it.type)
+			const configuration = providerService?.getPublicConfiguration
+				? providerService.getPublicConfiguration(it.configuration)
+				: it.configuration
+
+			return { ...it, configuration }
+		})
+	}
 }
 
 export type RegisterIDPResponse = Response<null, AddIdpErrorCode>

package/src/model/service/idp/IdentityProviderHandler.ts

@@ -16,4 +16,6 @@ export interface IdentityProviderHandler<Configuration extends {}> {
 	processResponse: (configuration: Configuration, responseData: unknown) =>  Promise<IDPClaim>
 
 	validateConfiguration: (config: unknown) => Configuration
+
+	getPublicConfiguration?: (config: Configuration) => Partial<Configuration>
 }

package/src/model/service/idp/index.ts

@@ -1,6 +1,7 @@
 export * from './IdentityProviderHandler'
 export * from './IdentityProviderNotFoundError'
 export * from './IDPHandlerRegistry'
+export * from './IDPManager'
 export * from './IDPResponseError'
 export * from './IDPValidationError'
 export * from './InvalidIDPConfigurationError'

package/src/model/service/idp/providers/AppleProvider.ts

@@ -1,6 +1,6 @@
 import * as Typesafe from '@contember/typesafe'
 import { IdentityProviderHandler, IDPClaim, InitIDPAuthResult } from '../IdentityProviderHandler'
-import { OIDCConfigurationOptions, OIDCInitData, OIDCResponseData, OIDCSessionData } from './OIDCTypes'
+import { OIDCConfiguration, OIDCConfigurationOptions, OIDCInitData, OIDCResponseData, OIDCSessionData } from './OIDCTypes'
 import { catchTypesafe } from './helpers'
 import { IDPValidationError } from '../IDPValidationError'
 import { InvalidIDPConfigurationError } from '../InvalidIDPConfigurationError'
@@ -42,6 +42,9 @@ export class AppleProvider implements IdentityProviderHandler<AppleConfiguration
 		return await handleOIDCResponse(client, responseData)
 	}
 
+	getPublicConfiguration({ privateKey, ...config }: AppleConfiguration): Partial<AppleConfiguration> {
+		return config
+	}
 
 	private async createOIDCClient(configuration: AppleConfiguration): Promise<Client> {
 		this.issuer ??= await Issuer.discover(APPLE_OIDC_CONFIGURATION_ENDPOINT)

package/src/model/service/idp/providers/FacebookProvider.ts

@@ -4,7 +4,7 @@ import { IdentityProviderHandler, IDPClaim, InitIDPAuthResult } from '../Identit
 import { IDPValidationError } from '../IDPValidationError'
 import { InvalidIDPConfigurationError } from '../InvalidIDPConfigurationError'
 import { catchTypesafe } from './helpers'
-import { BaseOIDCConfiguration, OIDCInitData, OIDCResponseData } from './OIDCTypes'
+import { BaseOIDCConfiguration, OIDCConfiguration, OIDCInitData, OIDCResponseData } from './OIDCTypes'
 import { handleOIDCResponse, initOIDCAuth } from './OIDCHelpers'
 import { createHmac } from 'node:crypto'
 import { IDPResponseError } from '../IDPResponseError'
@@ -115,6 +115,10 @@ export class FacebookProvider implements IdentityProviderHandler<FacebookConfigu
 		}
 	}
 
+	getPublicConfiguration({ clientSecret, ...config }: FacebookConfiguration): Partial<FacebookConfiguration> {
+		return config
+	}
+
 	private async createOIDCClient(configuration: FacebookConfiguration): Promise<Client> {
 		return new this.facebookIssuer.Client(
 			{

package/src/model/service/idp/providers/OIDCProvider.ts

@@ -28,6 +28,10 @@ export class OIDCProvider implements IdentityProviderHandler<OIDCConfiguration>
 	}
 
 
+	getPublicConfiguration({ clientSecret, ...config }: OIDCConfiguration): Partial<OIDCConfiguration> {
+		return config
+	}
+
 	private async createOIDCClient(configuration: OIDCConfiguration): Promise<Client> {
 		this.issuerCache[configuration.url] ??= await Issuer.discover(configuration.url)
 

package/src/model/service/index.ts

@@ -1,17 +1,20 @@
-export * from './idp'
 export * from './apiKey'
+export * from './idp'
+
+export * from './EmailValidator'
 export * from './IDPSignInManager'
 export * from './InviteManager'
 export * from './MailTemplateManager'
 export * from './MembershipValidator'
+export * from './OtpAuthenticator'
 export * from './OtpManager'
 export * from './PasswordChangeManager'
+export * from './PasswordResetManager'
+export * from './PersonAccessManager'
+export * from './PersonManager'
 export * from './ProjectManager'
 export * from './ProjectMemberManager'
 export * from './RolesManager'
+export * from './SecretsManager'
 export * from './SignInManager'
 export * from './SignUpManager'
-export * from './PasswordResetManager'
-export * from './SecretsManager'
-export * from './OtpAuthenticator'
-export * from './PersonAccessManager'

package/src/model/type/IdentityProvider.ts

@@ -8,4 +8,5 @@ export interface IdentityProviderData {
 export interface IdentityProviderOptions {
 	autoSignUp: boolean
 	exclusive: boolean
+	initReturnsConfig: boolean
 }

package/src/model/utils/DatabaseContext.ts

@@ -3,6 +3,7 @@ import { Providers } from '../providers'
 import { CommandBus } from '../commands'
 import { BatchLoaderArgs, initBatchLoader, ItemLoader } from '../../utils/batchQuery'
 
+
 export class DatabaseContext<Conn extends Connection.ConnectionLike = Connection.ConnectionLike> {
 	private loaders = new Map<BatchLoaderArgs<any, any, any>, ItemLoader<any, any>>()
 
@@ -43,15 +44,3 @@ export class DatabaseContext<Conn extends Connection.ConnectionLike = Connection
 		return newLoader(arg)
 	}
 }
-
-export class DatabaseContextFactory {
-	constructor(
-		private readonly connection: Connection.ClientFactory,
-		private readonly providers: Providers,
-	) {
-	}
-
-	public create(): DatabaseContext {
-		return new DatabaseContext(this.connection.createClient('tenant', { module: 'tenant' }), this.providers)
-	}
-}

package/src/resolvers/ResolverFactory.ts

@@ -1,5 +1,6 @@
 import {
 	AddProjectMemberMutationResolver,
+	ChangeProfileMutationResolver,
 	ChangePasswordMutationResolver,
 	CreateApiKeyMutationResolver,
 	CreateProjectMutationResolver,
@@ -25,6 +26,7 @@ import { DateTimeType, JSONType } from '@contember/graphql-utils'
 import { IDPQueryResolver } from './query/IDPQueryResolver'
 import { UpdateIDPMutationResolver } from './mutation/idp/UpdateIDPMutationResolver'
 import { DisablePersonMutationResolver } from './mutation/person/DisablePersonMutationResolver'
+import { } from './mutation/person/ChangeProfileMutationResolver'
 
 class ResolverFactory {
 	public constructor(
@@ -37,6 +39,7 @@ class ResolverFactory {
 			signUpMutationResolver: SignUpMutationResolver
 			signInMutationResolver: SignInMutationResolver
 			signOutMutationResolver: SignOutMutationResolver
+			changeProfileMutationResolver: ChangeProfileMutationResolver
 			changePasswordMutationResolver: ChangePasswordMutationResolver
 			resetPasswordMutationResolver: ResetPasswordMutationResolver
 			idpMutationResolver: IDPMutationResolver
@@ -69,7 +72,7 @@ class ResolverFactory {
 			identityGlobalRolesMutationResolver: IdentityGlobalRolesMutationResolver
 
 		},
-	) {}
+	) { }
 
 	create(): Resolvers & { Mutation: Required<Resolvers['Mutation']> } & { Query: Required<Resolvers['Query']> } {
 		return {
@@ -101,6 +104,7 @@ class ResolverFactory {
 				createSessionToken: this.resolvers.signInMutationResolver.createSessionToken.bind(this.resolvers.signInMutationResolver),
 				signOut: this.resolvers.signOutMutationResolver.signOut.bind(this.resolvers.signOutMutationResolver),
 
+				changeMyProfile: this.resolvers.changeProfileMutationResolver.changeMyProfile.bind(this.resolvers.changeProfileMutationResolver),
 				changePassword: this.resolvers.changePasswordMutationResolver.changePassword.bind(this.resolvers.changePasswordMutationResolver),
 				changeMyPassword: this.resolvers.changePasswordMutationResolver.changeMyPassword.bind(this.resolvers.changePasswordMutationResolver),
 				createResetPasswordRequest: this.resolvers.resetPasswordMutationResolver.createResetPasswordRequest.bind(this.resolvers.resetPasswordMutationResolver),

package/src/resolvers/mutation/idp/AddIDPMutationResolver.ts

@@ -20,6 +20,7 @@ export class AddIDPMutationResolver implements MutationResolvers {
 			options: {
 				autoSignUp: args.options?.autoSignUp ?? false,
 				exclusive: args.options?.exclusive ?? false,
+				initReturnsConfig: args.options?.initReturnsConfig ?? false,
 			},
 		})
 		if (!result.ok) {

package/src/resolvers/mutation/idp/UpdateIDPMutationResolver.ts

@@ -19,8 +19,9 @@ export class UpdateIDPMutationResolver implements MutationResolvers {
 			options: {
 				autoSignUp: args.options?.autoSignUp ?? undefined,
 				exclusive: args.options?.exclusive ?? undefined,
+				initReturnsConfig: args.options?.initReturnsConfig ?? undefined,
 			},
-		})
+		}, args.mergeConfiguration ?? false)
 		if (!result.ok) {
 			return createErrorResponse(result.error, result.errorMessage)
 		}

package/src/resolvers/mutation/person/ChangeProfileMutationResolver.ts

@@ -0,0 +1,42 @@
+import { ChangeMyProfileResponse, MutationChangeMyProfileArgs, MutationResolvers } from '../../../schema'
+import { GraphQLResolveInfo } from 'graphql'
+import { TenantResolverContext } from '../../TenantResolverContext'
+import { PermissionActions, PersonManager, PersonQuery } from '../../../model'
+import { createErrorResponse } from '../../errorUtils'
+
+export class ChangeProfileMutationResolver implements MutationResolvers {
+	constructor(
+		private readonly personManager: PersonManager,
+	) { }
+
+	async changeMyProfile(
+		parent: unknown,
+		args: MutationChangeMyProfileArgs,
+		context: TenantResolverContext,
+		info: GraphQLResolveInfo,
+	): Promise<ChangeMyProfileResponse> {
+		const person = await context.db.queryHandler.fetch(PersonQuery.byIdentity(context.identity.id))
+		if (!person) {
+			return createErrorResponse('NOT_A_PERSON', 'Only a person can change a profile.')
+		}
+		if (args.email === null) {
+			return createErrorResponse('INVALID_EMAIL_FORMAT', 'E-mail address cannot be null.')
+		}
+
+		await context.requireAccess({
+			action: PermissionActions.PERSON_CHANGE_MY_PROFILE,
+			message: 'You are not allowed to change profile',
+		})
+
+		const result = await this.personManager.changeMyProfile(context.db, person, {
+			email: args.email,
+			name: args.name === '' ? null : args.name,
+		})
+
+		if (!result.ok) {
+			return createErrorResponse(result.error, result.errorMessage)
+		}
+
+		return { ok: true }
+	}
+}

package/src/resolvers/mutation/person/index.ts

@@ -1,3 +1,4 @@
+export * from './ChangeProfileMutationResolver'
 export * from './ChangePasswordMutationResolver'
 export * from './IDPMutationResolver'
 export * from './InviteMutationResolver'

package/src/resolvers/query/IDPQueryResolver.ts

@@ -1,14 +1,21 @@
 import { IdentityProvider, QueryResolvers } from '../../schema'
-import { IdentityProvidersQuery, PermissionActions } from '../../model'
+import { PermissionActions } from '../../model'
 import { TenantResolverContext } from '../TenantResolverContext'
+import { IDPManager } from '../../model/service/idp/IDPManager'
 
 export class IDPQueryResolver implements QueryResolvers {
+
+	constructor(
+		private readonly idpManager: IDPManager,
+	) {
+	}
+
 	async identityProviders(parent: unknown, args: unknown, context: TenantResolverContext): Promise<IdentityProvider[]> {
 		await context.requireAccess({
 			action: PermissionActions.IDP_LIST,
 			message: 'You are not allowed to list IDP',
 		})
 
-		return await context.db.queryHandler.fetch(new IdentityProvidersQuery())
+		return await this.idpManager.listIDP(context.db)
 	}
 }

package/src/schema/index.ts

@@ -131,6 +131,23 @@ export type ChangeMyPasswordResponse = {
 	readonly ok: Scalars['Boolean']
 }
 
+export type ChangeMyProfileError = {
+	readonly __typename?: 'ChangeMyProfileError'
+	readonly code: ChangeMyProfileErrorCode
+	readonly developerMessage: Scalars['String']
+}
+
+export type ChangeMyProfileErrorCode =
+  | 'EMAIL_ALREADY_EXISTS'
+  | 'INVALID_EMAIL_FORMAT'
+  | 'NOT_A_PERSON'
+
+export type ChangeMyProfileResponse = {
+	readonly __typename?: 'ChangeMyProfileResponse'
+	readonly error?: Maybe<ChangeMyProfileError>
+	readonly ok: Scalars['Boolean']
+}
+
 export type ChangePasswordError = {
 	readonly __typename?: 'ChangePasswordError'
 	readonly code: ChangePasswordErrorCode
@@ -379,6 +396,7 @@ export type EnableIdpResponse = {
 export type IdpOptions = {
 	readonly autoSignUp?: InputMaybe<Scalars['Boolean']>
 	readonly exclusive?: InputMaybe<Scalars['Boolean']>
+	readonly initReturnsConfig?: InputMaybe<Scalars['Boolean']>
 }
 
 export type IdpOptionsOutput = {
@@ -447,6 +465,7 @@ export type InitSignInIdpResponse = {
 export type InitSignInIdpResult = {
 	readonly __typename?: 'InitSignInIDPResult'
 	readonly authUrl: Scalars['String']
+	readonly idpConfiguration?: Maybe<Scalars['Json']>
 	readonly sessionData: Scalars['Json']
 }
 
@@ -550,6 +569,7 @@ export type Mutation = {
 	readonly addProjectMailTemplate?: Maybe<AddMailTemplateResponse>
 	readonly addProjectMember?: Maybe<AddProjectMemberResponse>
 	readonly changeMyPassword?: Maybe<ChangeMyPasswordResponse>
+	readonly changeMyProfile?: Maybe<ChangeMyProfileResponse>
 	readonly changePassword?: Maybe<ChangePasswordResponse>
 	readonly confirmOtp?: Maybe<ConfirmOtpResponse>
 	readonly createApiKey?: Maybe<CreateApiKeyResponse>
@@ -620,6 +640,12 @@ export type MutationChangeMyPasswordArgs = {
 }
 
 
+export type MutationChangeMyProfileArgs = {
+	email?: InputMaybe<Scalars['String']>
+	name?: InputMaybe<Scalars['String']>
+}
+
+
 export type MutationChangePasswordArgs = {
 	password: Scalars['String']
 	personId: Scalars['String']
@@ -790,6 +816,7 @@ export type MutationUnmanagedInviteArgs = {
 export type MutationUpdateIdpArgs = {
 	configuration?: InputMaybe<Scalars['Json']>
 	identityProvider: Scalars['String']
+	mergeConfiguration?: InputMaybe<Scalars['Boolean']>
 	options?: InputMaybe<IdpOptions>
 	type?: InputMaybe<Scalars['String']>
 }
@@ -1289,6 +1316,9 @@ export type ResolversTypes = {
 	ChangeMyPasswordError: ResolverTypeWrapper<ChangeMyPasswordError>
 	ChangeMyPasswordErrorCode: ChangeMyPasswordErrorCode
 	ChangeMyPasswordResponse: ResolverTypeWrapper<ChangeMyPasswordResponse>
+	ChangeMyProfileError: ResolverTypeWrapper<ChangeMyProfileError>
+	ChangeMyProfileErrorCode: ChangeMyProfileErrorCode
+	ChangeMyProfileResponse: ResolverTypeWrapper<ChangeMyProfileResponse>
 	ChangePasswordError: ResolverTypeWrapper<ChangePasswordError>
 	ChangePasswordErrorCode: ChangePasswordErrorCode
 	ChangePasswordResponse: ResolverTypeWrapper<ChangePasswordResponse>
@@ -1435,6 +1465,8 @@ export type ResolversParentTypes = {
 	Boolean: Scalars['Boolean']
 	ChangeMyPasswordError: ChangeMyPasswordError
 	ChangeMyPasswordResponse: ChangeMyPasswordResponse
+	ChangeMyProfileError: ChangeMyProfileError
+	ChangeMyProfileResponse: ChangeMyProfileResponse
 	ChangePasswordError: ChangePasswordError
 	ChangePasswordResponse: ChangePasswordResponse
 	CheckResetPasswordTokenResult: CheckResetPasswordTokenResult
@@ -1619,6 +1651,18 @@ export type ChangeMyPasswordResponseResolvers<ContextType = any, ParentType exte
 	__isTypeOf?: IsTypeOfResolverFn<ParentType, ContextType>
 }
 
+export type ChangeMyProfileErrorResolvers<ContextType = any, ParentType extends ResolversParentTypes['ChangeMyProfileError'] = ResolversParentTypes['ChangeMyProfileError']> = {
+	code?: Resolver<ResolversTypes['ChangeMyProfileErrorCode'], ParentType, ContextType>
+	developerMessage?: Resolver<ResolversTypes['String'], ParentType, ContextType>
+	__isTypeOf?: IsTypeOfResolverFn<ParentType, ContextType>
+}
+
+export type ChangeMyProfileResponseResolvers<ContextType = any, ParentType extends ResolversParentTypes['ChangeMyProfileResponse'] = ResolversParentTypes['ChangeMyProfileResponse']> = {
+	error?: Resolver<Maybe<ResolversTypes['ChangeMyProfileError']>, ParentType, ContextType>
+	ok?: Resolver<ResolversTypes['Boolean'], ParentType, ContextType>
+	__isTypeOf?: IsTypeOfResolverFn<ParentType, ContextType>
+}
+
 export type ChangePasswordErrorResolvers<ContextType = any, ParentType extends ResolversParentTypes['ChangePasswordError'] = ResolversParentTypes['ChangePasswordError']> = {
 	code?: Resolver<ResolversTypes['ChangePasswordErrorCode'], ParentType, ContextType>
 	developerMessage?: Resolver<ResolversTypes['String'], ParentType, ContextType>
@@ -1853,6 +1897,7 @@ export type InitSignInIdpResponseResolvers<ContextType = any, ParentType extends
 
 export type InitSignInIdpResultResolvers<ContextType = any, ParentType extends ResolversParentTypes['InitSignInIDPResult'] = ResolversParentTypes['InitSignInIDPResult']> = {
 	authUrl?: Resolver<ResolversTypes['String'], ParentType, ContextType>
+	idpConfiguration?: Resolver<Maybe<ResolversTypes['Json']>, ParentType, ContextType>
 	sessionData?: Resolver<ResolversTypes['Json'], ParentType, ContextType>
 	__isTypeOf?: IsTypeOfResolverFn<ParentType, ContextType>
 }
@@ -1903,6 +1948,7 @@ export type MutationResolvers<ContextType = any, ParentType extends ResolversPar
 	addProjectMailTemplate?: Resolver<Maybe<ResolversTypes['AddMailTemplateResponse']>, ParentType, ContextType, RequireFields<MutationAddProjectMailTemplateArgs, 'template'>>
 	addProjectMember?: Resolver<Maybe<ResolversTypes['AddProjectMemberResponse']>, ParentType, ContextType, RequireFields<MutationAddProjectMemberArgs, 'identityId' | 'memberships' | 'projectSlug'>>
 	changeMyPassword?: Resolver<Maybe<ResolversTypes['ChangeMyPasswordResponse']>, ParentType, ContextType, RequireFields<MutationChangeMyPasswordArgs, 'currentPassword' | 'newPassword'>>
+	changeMyProfile?: Resolver<Maybe<ResolversTypes['ChangeMyProfileResponse']>, ParentType, ContextType, Partial<MutationChangeMyProfileArgs>>
 	changePassword?: Resolver<Maybe<ResolversTypes['ChangePasswordResponse']>, ParentType, ContextType, RequireFields<MutationChangePasswordArgs, 'password' | 'personId'>>
 	confirmOtp?: Resolver<Maybe<ResolversTypes['ConfirmOtpResponse']>, ParentType, ContextType, RequireFields<MutationConfirmOtpArgs, 'otpToken'>>
 	createApiKey?: Resolver<Maybe<ResolversTypes['CreateApiKeyResponse']>, ParentType, ContextType, RequireFields<MutationCreateApiKeyArgs, 'description' | 'memberships' | 'projectSlug'>>
@@ -2215,6 +2261,8 @@ export type Resolvers<ContextType = any> = {
 	ApiKeyWithToken?: ApiKeyWithTokenResolvers<ContextType>
 	ChangeMyPasswordError?: ChangeMyPasswordErrorResolvers<ContextType>
 	ChangeMyPasswordResponse?: ChangeMyPasswordResponseResolvers<ContextType>
+	ChangeMyProfileError?: ChangeMyProfileErrorResolvers<ContextType>
+	ChangeMyProfileResponse?: ChangeMyProfileResponseResolvers<ContextType>
 	ChangePasswordError?: ChangePasswordErrorResolvers<ContextType>
 	ChangePasswordResponse?: ChangePasswordResponseResolvers<ContextType>
 	CheckResetPasswordTokenResult?: CheckResetPasswordTokenResultResolvers<ContextType>

package/src/schema/tenant.graphql.ts

@@ -25,6 +25,7 @@ const schema: DocumentNode = gql`
 		signIn(email: String!, password: String!, expiration: Int, otpToken: String): SignInResponse
 		createSessionToken(email: String, personId: String, expiration: Int): CreateSessionTokenResponse
 		signOut(all: Boolean): SignOutResponse
+		changeMyProfile(email: String, name: String): ChangeMyProfileResponse
 		changePassword(personId: String!, password: String!): ChangePasswordResponse
 		changeMyPassword(currentPassword: String!, newPassword: String!): ChangeMyPasswordResponse
 
@@ -44,7 +45,7 @@ const schema: DocumentNode = gql`
 
 		# IDP management
 		addIDP(identityProvider: String!, type: String!, configuration: Json!, options: IDPOptions): AddIDPResponse
-		updateIDP(identityProvider: String!, type: String, configuration: Json, options: IDPOptions): UpdateIDPResponse
+		updateIDP(identityProvider: String!, type: String, configuration: Json, options: IDPOptions, mergeConfiguration: Boolean): UpdateIDPResponse
 		disableIDP(identityProvider: String!): DisableIDPResponse
 		enableIDP(identityProvider: String!): EnableIDPResponse
 
@@ -202,6 +203,24 @@ const schema: DocumentNode = gql`
 		NOT_POSSIBLE_SIGN_OUT_WITH_PERMANENT_API_KEY
 	}
 
+	# === changeProfile ===
+
+	type ChangeMyProfileResponse {
+		ok: Boolean!
+		error: ChangeMyProfileError
+	}
+
+	type ChangeMyProfileError {
+		code: ChangeMyProfileErrorCode!
+		developerMessage: String!
+	}
+
+	enum ChangeMyProfileErrorCode {
+		NOT_A_PERSON
+		INVALID_EMAIL_FORMAT
+		EMAIL_ALREADY_EXISTS
+	}
+
 	# === changePassword ===
 
 	type ChangePasswordResponse {
@@ -251,6 +270,7 @@ const schema: DocumentNode = gql`
 	type InitSignInIDPResult {
 		authUrl: String!
 		sessionData: Json!
+		idpConfiguration: Json
 	}
 
 	type InitSignInIDPError {
@@ -366,11 +386,13 @@ const schema: DocumentNode = gql`
 	type IDPOptionsOutput {
 		autoSignUp: Boolean!
 		exclusive: Boolean!
+		initReturnsConfig: Boolean!
 	}
 
 	input IDPOptions {
 		autoSignUp: Boolean
 		exclusive: Boolean
+		initReturnsConfig: Boolean
 	}