@contember/react-client-tenant 2.2.0-alpha.3 → 2.2.0-alpha.6

package/src/hooks/mutations/emailOtp/useDisableEmailOtpMutation.ts

@@ -0,0 +1,13 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+export const disableEmailOtpMutation = TenantApi.mutation$
+	.disableEmailOtp(
+		TenantApi
+			.disableEmailOtpResponse$$
+			.error(TenantApi.disableEmailOtpError$$),
+		options => options.alias('mutation'),
+	)
+
+export const useDisableEmailOtpMutation = createTenantMutation(disableEmailOtpMutation)
+export type DisableEmailOtpMutationVariables = Parameters<ReturnType<typeof useDisableEmailOtpMutation>>[0]

package/src/hooks/mutations/emailOtp/useInitEmailOtpMutation.ts

@@ -0,0 +1,13 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+export const initEmailOtpMutation = TenantApi.mutation$
+	.initEmailOtp(
+		TenantApi
+			.initEmailOtpResponse$$
+			.error(TenantApi.initEmailOtpError$$),
+		options => options.alias('mutation'),
+	)
+
+export const useInitEmailOtpMutation = createTenantMutation(initEmailOtpMutation)
+export type InitEmailOtpMutationVariables = Parameters<ReturnType<typeof useInitEmailOtpMutation>>[0]

package/src/hooks/mutations/identity/index.ts

@@ -0,0 +1,2 @@
+export * from './useAddGlobalIdentityRolesMutation.js'
+export * from './useRemoveGlobalIdentityRolesMutation.js'

package/src/hooks/mutations/identity/useAddGlobalIdentityRolesMutation.ts

@@ -0,0 +1,19 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType } from 'graphql-ts-client-api'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+const addGlobalIdentityRolesResult = TenantApi.addGlobalIdentityRolesResult$.identity(TenantApi.identity$$)
+
+export type AddGlobalIdentityRolesMutationResult = ModelType<typeof addGlobalIdentityRolesResult>
+
+export const addGlobalIdentityRolesMutation = TenantApi.mutation$
+	.addGlobalIdentityRoles(
+		TenantApi
+			.addGlobalIdentityRolesResponse$$
+			.error(TenantApi.addGlobalIdentityRolesError$$)
+			.result(addGlobalIdentityRolesResult),
+		options => options.alias('mutation'),
+	)
+
+export const useAddGlobalIdentityRolesMutation = createTenantMutation(addGlobalIdentityRolesMutation)
+export type AddGlobalIdentityRolesMutationVariables = Parameters<ReturnType<typeof useAddGlobalIdentityRolesMutation>>[0]

package/src/hooks/mutations/identity/useRemoveGlobalIdentityRolesMutation.ts

@@ -0,0 +1,19 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType } from 'graphql-ts-client-api'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+const removeGlobalIdentityRolesResult = TenantApi.removeGlobalIdentityRolesResult$.identity(TenantApi.identity$$)
+
+export type RemoveGlobalIdentityRolesMutationResult = ModelType<typeof removeGlobalIdentityRolesResult>
+
+export const removeGlobalIdentityRolesMutation = TenantApi.mutation$
+	.removeGlobalIdentityRoles(
+		TenantApi
+			.removeGlobalIdentityRolesResponse$$
+			.error(TenantApi.removeGlobalIdentityRolesError$$)
+			.result(removeGlobalIdentityRolesResult),
+		options => options.alias('mutation'),
+	)
+
+export const useRemoveGlobalIdentityRolesMutation = createTenantMutation(removeGlobalIdentityRolesMutation)
+export type RemoveGlobalIdentityRolesMutationVariables = Parameters<ReturnType<typeof useRemoveGlobalIdentityRolesMutation>>[0]

package/src/hooks/mutations/idp/index.ts

@@ -1,2 +1,3 @@
+export * from './useDisconnectMyIdentityProviderMutation.js'
 export * from './useInitSignInIDPMutation.js'
 export * from './useSignInIdpMutation.js'

package/src/hooks/mutations/idp/useDisconnectMyIdentityProviderMutation.tsx

@@ -0,0 +1,13 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+export const disconnectMyIdentityProviderMutation = TenantApi.mutation$
+	.disconnectMyIdentityProvider(
+		TenantApi
+			.disconnectIDPResponse$$
+			.error(TenantApi.disconnectIDPError$$),
+		options => options.alias('mutation'),
+	)
+
+export const useDisconnectMyIdentityProviderMutation = createTenantMutation(disconnectMyIdentityProviderMutation)
+export type DisconnectMyIdentityProviderMutationVariables = Parameters<ReturnType<typeof useDisconnectMyIdentityProviderMutation>>[0]

package/src/hooks/mutations/index.ts

@@ -1,10 +1,15 @@
 export * from './apiKey/index.js'
 export * from './auth/index.js'
+export * from './emailOtp/index.js'
 export * from './emailVerification/index.js'
+export * from './identity/index.js'
 export * from './invite/index.js'
 export * from './idp/index.js'
 export * from './memberships/index.js'
 export * from './passwordless/index.js'
 export * from './otp/index.js'
 export * from './passwordReset/index.js'
+export * from './person/index.js'
 export * from './profile/index.js'
+export * from './project/index.js'
+export * from './session/index.js'

package/src/hooks/mutations/invite/index.ts

@@ -1 +1,2 @@
 export * from './useInviteMutation.js'
+export * from './useUnmanagedInviteMutation.js'

package/src/hooks/mutations/invite/useUnmanagedInviteMutation.tsx

@@ -0,0 +1,25 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType } from 'graphql-ts-client-api'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+const unmanagedInviteMutationResult = TenantApi.inviteResult$$
+	.person(TenantApi.person$.id.email.name.identity(TenantApi.identity$$))
+
+export type UnmanagedInviteMutationResult = ModelType<typeof unmanagedInviteMutationResult>
+
+/**
+ * Creates a member without sending an invitation e-mail, optionally with a
+ * password set up front. Seeding, migrations and air-gapped environments need
+ * this; `invite` always mails.
+ */
+export const unmanagedInviteMutation = TenantApi.mutation$
+	.unmanagedInvite(
+		TenantApi
+			.inviteResponse$$
+			.error(TenantApi.inviteError$$.membershipValidation(TenantApi.membershipValidationError$$))
+			.result(unmanagedInviteMutationResult),
+		options => options.alias('mutation'),
+	)
+
+export const useUnmanagedInviteMutation = createTenantMutation(unmanagedInviteMutation)
+export type UnmanagedInviteMutationVariables = Parameters<ReturnType<typeof useUnmanagedInviteMutation>>[0]

package/src/hooks/mutations/otp/index.ts

@@ -1,3 +1,4 @@
 export * from './useConfirmOtpMutation.js'
 export * from './useDisableOtpMutation.js'
 export * from './usePrepareOtpMutation.js'
+export * from './useRegenerateBackupCodesMutation.js'

package/src/hooks/mutations/otp/useRegenerateBackupCodesMutation.ts

@@ -0,0 +1,19 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType } from 'graphql-ts-client-api'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+const regenerateBackupCodesResult = TenantApi.regenerateBackupCodesResult$$
+
+export type RegenerateBackupCodesMutationResult = ModelType<typeof regenerateBackupCodesResult>
+
+export const regenerateBackupCodesMutation = TenantApi.mutation$
+	.regenerateBackupCodes(
+		TenantApi
+			.regenerateBackupCodesResponse$$
+			.error(TenantApi.regenerateBackupCodesError$$)
+			.result(regenerateBackupCodesResult),
+		options => options.alias('mutation'),
+	)
+
+export const useRegenerateBackupCodesMutation = createTenantMutation(regenerateBackupCodesMutation)
+export type RegenerateBackupCodesMutationVariables = Parameters<ReturnType<typeof useRegenerateBackupCodesMutation>>[0]

package/src/hooks/mutations/person/index.ts

@@ -0,0 +1,5 @@
+export * from './useChangePasswordMutation.js'
+export * from './useDisablePersonMutation.js'
+export * from './useEnablePersonMutation.js'
+export * from './useForceSignOutPersonMutation.js'
+export * from './useResetPersonMfaMutation.js'

package/src/hooks/mutations/person/useChangePasswordMutation.ts

@@ -0,0 +1,14 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+// The response also carries a deprecated `errors` array; only the singular `error` is selected.
+export const changePasswordMutation = TenantApi.mutation$
+	.changePassword(
+		TenantApi
+			.changePasswordResponse$$
+			.error(TenantApi.changePasswordError$$),
+		options => options.alias('mutation'),
+	)
+
+export const useChangePasswordMutation = createTenantMutation(changePasswordMutation)
+export type ChangePasswordMutationVariables = Parameters<ReturnType<typeof useChangePasswordMutation>>[0]

package/src/hooks/mutations/person/useDisablePersonMutation.ts

@@ -0,0 +1,13 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+export const disablePersonMutation = TenantApi.mutation$
+	.disablePerson(
+		TenantApi
+			.disablePersonResponse$$
+			.error(TenantApi.disablePersonError$$),
+		options => options.alias('mutation'),
+	)
+
+export const useDisablePersonMutation = createTenantMutation(disablePersonMutation)
+export type DisablePersonMutationVariables = Parameters<ReturnType<typeof useDisablePersonMutation>>[0]

package/src/hooks/mutations/person/useEnablePersonMutation.ts

@@ -0,0 +1,13 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+export const enablePersonMutation = TenantApi.mutation$
+	.enablePerson(
+		TenantApi
+			.enablePersonResponse$$
+			.error(TenantApi.enablePersonError$$),
+		options => options.alias('mutation'),
+	)
+
+export const useEnablePersonMutation = createTenantMutation(enablePersonMutation)
+export type EnablePersonMutationVariables = Parameters<ReturnType<typeof useEnablePersonMutation>>[0]

package/src/hooks/mutations/person/useForceSignOutPersonMutation.ts

@@ -0,0 +1,13 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+export const forceSignOutPersonMutation = TenantApi.mutation$
+	.forceSignOutPerson(
+		TenantApi
+			.forceSignOutPersonResponse$$
+			.error(TenantApi.forceSignOutPersonError$$),
+		options => options.alias('mutation'),
+	)
+
+export const useForceSignOutPersonMutation = createTenantMutation(forceSignOutPersonMutation)
+export type ForceSignOutPersonMutationVariables = Parameters<ReturnType<typeof useForceSignOutPersonMutation>>[0]

package/src/hooks/mutations/person/useResetPersonMfaMutation.ts

@@ -0,0 +1,13 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+export const resetPersonMfaMutation = TenantApi.mutation$
+	.resetPersonMfa(
+		TenantApi
+			.resetPersonMfaResponse$$
+			.error(TenantApi.resetPersonMfaError$$),
+		options => options.alias('mutation'),
+	)
+
+export const useResetPersonMfaMutation = createTenantMutation(resetPersonMfaMutation)
+export type ResetPersonMfaMutationVariables = Parameters<ReturnType<typeof useResetPersonMfaMutation>>[0]

package/src/hooks/mutations/project/index.ts

@@ -0,0 +1 @@
+export * from './useSetProjectSecretMutation.js'

package/src/hooks/mutations/project/useSetProjectSecretMutation.ts

@@ -0,0 +1,13 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+export const setProjectSecretMutation = TenantApi.mutation$
+	.setProjectSecret(
+		TenantApi
+			.setProjectSecretResponse$$
+			.error(TenantApi.setProjectSecretError$$),
+		options => options.alias('mutation'),
+	)
+
+export const useSetProjectSecretMutation = createTenantMutation(setProjectSecretMutation)
+export type SetProjectSecretMutationVariables = Parameters<ReturnType<typeof useSetProjectSecretMutation>>[0]

package/src/hooks/mutations/session/index.ts

@@ -0,0 +1 @@
+export * from './useRevokeSessionMutation.js'

package/src/hooks/mutations/session/useRevokeSessionMutation.ts

@@ -0,0 +1,13 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { createTenantMutation } from '../../useTenantMutation.js'
+
+export const revokeSessionMutation = TenantApi.mutation$
+	.revokeSession(
+		TenantApi
+			.revokeSessionResponse$$
+			.error(TenantApi.revokeSessionError$$),
+		options => options.alias('mutation'),
+	)
+
+export const useRevokeSessionMutation = createTenantMutation(revokeSessionMutation)
+export type RevokeSessionMutationVariables = Parameters<ReturnType<typeof useRevokeSessionMutation>>[0]

package/src/hooks/queries/index.ts

@@ -1,4 +1,17 @@
+export * from './useAuthLogQuery.js'
+export * from './useAuthPoliciesQuery.js'
+export * from './useConfigurationQuery.js'
+export * from './useGlobalApiKeysQuery.js'
+export * from './useIdentityProvidersQuery.js'
+export * from './useMailTemplatesQuery.js'
 export * from './useMeQuery.js'
+export * from './useMyIdentityProvidersQuery.js'
+export * from './useMySessionsQuery.js'
+export * from './usePersonQuery.js'
+export * from './usePersonSessionsQuery.js'
+export * from './usePersonsQuery.js'
+export * from './useProjectApiKeysQuery.js'
 export * from './useProjectMembersQuery.js'
 export * from './useProjectMembershipsQuery.js'
 export * from './useProjectRolesDefinitionQuery.js'
+export * from './useProjectSecretsQuery.js'

package/src/hooks/queries/useAuthLogQuery.ts

@@ -0,0 +1,28 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType, ParameterRef } from 'graphql-ts-client-api'
+import { TenantApiOptions, useTenantApi } from '../useTenantApi.js'
+import { useCallback } from 'react'
+
+const authLogPageFragment = TenantApi.authLogPage$
+	.entries(TenantApi.authLogEntry$$)
+	.hasMore
+
+/** The whole page, not just the entries — `hasMore` drives pagination in the UI. */
+export type AuthLogQueryResult = ModelType<typeof authLogPageFragment>
+
+export type AuthLogQueryVariables = { filter?: TenantApi.AuthLogFilter; limit?: number; offset?: number }
+
+export const useAuthLogQuery = (options: TenantApiOptions = {}) => {
+	const executor = useTenantApi(options)
+	return useCallback(async (variables: AuthLogQueryVariables = {}): Promise<AuthLogQueryResult> => {
+		const result = await executor(
+			TenantApi.query$.authLog(
+				{ filter: ParameterRef.of('filter'), limit: ParameterRef.of('limit'), offset: ParameterRef.of('offset') },
+				authLogPageFragment,
+			),
+			{ variables },
+		)
+
+		return result.authLog
+	}, [executor])
+}

package/src/hooks/queries/useAuthPoliciesQuery.ts

@@ -0,0 +1,26 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType } from 'graphql-ts-client-api'
+import { TenantApiOptions, useTenantApi } from '../useTenantApi.js'
+import { useCallback } from 'react'
+
+const authPolicyFragment = TenantApi.authPolicy$$
+
+export type AuthPoliciesQueryResult = readonly ModelType<typeof authPolicyFragment>[]
+
+/**
+ * Lists the configured per-role MFA / session policies.
+ *
+ * Read-only on purpose — policies are written with `contember tenant:apply`.
+ * Requires `system:configure`; the resolver **throws** for a caller without it.
+ *
+ * Note that policies aggregate rather than override: an identity is subject to
+ * every policy matching any of its roles, strictest wins.
+ */
+export const useAuthPoliciesQuery = (options: TenantApiOptions = {}) => {
+	const executor = useTenantApi(options)
+	return useCallback(async ({}: {} = {}): Promise<AuthPoliciesQueryResult> => {
+		const result = await executor(TenantApi.query$.authPolicies(authPolicyFragment), {})
+
+		return result.authPolicies
+	}, [executor])
+}

package/src/hooks/queries/useConfigurationQuery.ts

@@ -0,0 +1,42 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType } from 'graphql-ts-client-api'
+import { TenantApiOptions, useTenantApi } from '../useTenantApi.js'
+import { useCallback } from 'react'
+
+const rateLimitsFragment = TenantApi.configRateLimits$
+	.signUpPerIp(TenantApi.configRateLimitWindow$$)
+	.loginPerIp(TenantApi.configRateLimitWindow$$)
+	.passwordResetPerIp(TenantApi.configRateLimitWindow$$)
+	.passwordlessInitPerIp(TenantApi.configRateLimitWindow$$)
+	.emailOtpPerPerson(TenantApi.configRateLimitWindow$$)
+	.emailVerificationPerIp(TenantApi.configRateLimitWindow$$)
+
+const configFragment = TenantApi.config$
+	.signup(TenantApi.configSignup$$)
+	.emailChange(TenantApi.configEmailChange$$)
+	.passwordless(TenantApi.configPasswordless$$)
+	.password(TenantApi.configPassword$$)
+	.login(TenantApi.configLogin$$.anomalyDetection(TenantApi.configLoginAnomalyDetection$$))
+	.captcha(TenantApi.configCaptcha$$.protect(TenantApi.configCaptchaProtect$$))
+	.rateLimits(rateLimitsFragment)
+	.panel(TenantApi.configPanel$$)
+
+export type ConfigurationQueryResult = ModelType<typeof configFragment>
+
+/**
+ * Reads the tenant-wide configuration. Read-only on purpose — the write path is
+ * `contember tenant:apply`, there is no `useConfigureMutation`.
+ *
+ * Requires `system:viewConfig` — the read counterpart of `system:configure`, not
+ * the same action. The resolver **throws** for a caller without it rather than
+ * returning a default, so consumers must treat the rejection as a normal
+ * "not visible to you" state.
+ */
+export const useConfigurationQuery = (options: TenantApiOptions = {}) => {
+	const executor = useTenantApi(options)
+	return useCallback(async ({}: {} = {}): Promise<ConfigurationQueryResult> => {
+		const result = await executor(TenantApi.query$.configuration(configFragment), {})
+
+		return result.configuration
+	}, [executor])
+}

package/src/hooks/queries/useGlobalApiKeysQuery.ts

@@ -0,0 +1,19 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType } from 'graphql-ts-client-api'
+import { TenantApiOptions, useTenantApi } from '../useTenantApi.js'
+import { useCallback } from 'react'
+
+const globalApiKeyFragment = TenantApi
+	.apiKey$$
+	.identity(TenantApi.identity$$)
+
+export type GlobalApiKeysQueryResult = readonly ModelType<typeof globalApiKeyFragment>[]
+
+export const useGlobalApiKeysQuery = (options: TenantApiOptions = {}) => {
+	const executor = useTenantApi(options)
+	return useCallback(async ({}: {} = {}): Promise<GlobalApiKeysQueryResult> => {
+		const result = await executor(TenantApi.query$.globalApiKeys(globalApiKeyFragment))
+
+		return result.globalApiKeys ?? []
+	}, [executor])
+}

package/src/hooks/queries/useIdentityProvidersQuery.ts

@@ -0,0 +1,31 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType } from 'graphql-ts-client-api'
+import { TenantApiOptions, useTenantApi } from '../useTenantApi.js'
+import { useCallback } from 'react'
+
+const identityProviderFragment = TenantApi.identityProvider$$
+	.options(TenantApi.iDPOptionsOutput$$)
+
+export type IdentityProvidersQueryResult = readonly ModelType<typeof identityProviderFragment>[]
+
+/**
+ * Lists the identity providers configured on the tenant.
+ *
+ * Requires `idp:list` (PROJECT_ADMIN / SUPER_ADMIN), so this is an
+ * administration view — it cannot be used to render provider buttons on a login
+ * screen, where the caller is unauthenticated. Those slugs still come from the
+ * application's own configuration.
+ *
+ * `configuration` is passed through `IdentityProviderHandler.getPublicConfiguration`
+ * server-side, which strips the client secret for the built-in oidc / apple /
+ * facebook handlers. A third-party handler that does not implement it returns
+ * the raw stored configuration, so do not render this blob unconditionally.
+ */
+export const useIdentityProvidersQuery = (options: TenantApiOptions = {}) => {
+	const executor = useTenantApi(options)
+	return useCallback(async ({}: {} = {}): Promise<IdentityProvidersQueryResult> => {
+		const result = await executor(TenantApi.query$.identityProviders(identityProviderFragment), {})
+
+		return result.identityProviders
+	}, [executor])
+}

package/src/hooks/queries/useMailTemplatesQuery.ts

@@ -0,0 +1,25 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType } from 'graphql-ts-client-api'
+import { TenantApiOptions, useTenantApi } from '../useTenantApi.js'
+import { useCallback } from 'react'
+
+const mailTemplateFragment = TenantApi.mailTemplateData$$
+
+export type MailTemplatesQueryResult = readonly ModelType<typeof mailTemplateFragment>[]
+
+/**
+ * Lists the configured mail templates, including their rendered `content`.
+ *
+ * Read-only on purpose — templates are written with `contember tenant:apply`.
+ * A template not listed here means the built-in default is in use.
+ *
+ * Requires `mailTemplate:list`; the resolver **throws** for a caller without it.
+ */
+export const useMailTemplatesQuery = (options: TenantApiOptions = {}) => {
+	const executor = useTenantApi(options)
+	return useCallback(async ({}: {} = {}): Promise<MailTemplatesQueryResult> => {
+		const result = await executor(TenantApi.query$.mailTemplates(mailTemplateFragment), {})
+
+		return result.mailTemplates
+	}, [executor])
+}

package/src/hooks/queries/useMeQuery.ts

@@ -5,11 +5,15 @@ import { useCallback } from 'react'
 
 const identityFragment = TenantApi
 	.identity$$
-	.person(TenantApi.person$.id.email.name.otpEnabled)
+	// `passwordlessAvailable` / `passwordlessSelfManaged` resolve the tenant policy server-side; the raw
+	// `passwordlessEnabled` opt-in alone cannot tell a UI what signing in will actually do.
+	.person(
+		TenantApi.person$.id.email.name.otpEnabled.emailOtpEnabled.passwordlessEnabled.passwordlessAvailable.passwordlessSelfManaged,
+	)
 	.projects(
 		TenantApi
 			.identityProjectRelation$
-			.project(TenantApi.project$$)
+			.project(TenantApi.project$$.permissions(TenantApi.projectPermissions$$))
 			.memberships(TenantApi.membership$$.variables(TenantApi.variableEntry$$)),
 	)
 	.permissions(TenantApi.identityGlobalPermissions$$)

package/src/hooks/queries/useMyIdentityProvidersQuery.ts

@@ -0,0 +1,25 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType } from 'graphql-ts-client-api'
+import { TenantApiOptions, useTenantApi } from '../useTenantApi.js'
+import { useCallback } from 'react'
+
+const personIdentityProviderFragment = TenantApi
+	.personIdentityProvider$$
+	.identityProvider(TenantApi.identityProviderListItem$$)
+
+export type MyIdentityProvidersQueryResult = readonly ModelType<typeof personIdentityProviderFragment>[]
+
+export const useMyIdentityProvidersQuery = (options: TenantApiOptions = {}) => {
+	const executor = useTenantApi(options)
+	return useCallback(async ({}: {} = {}): Promise<MyIdentityProvidersQueryResult> => {
+		const result = await executor(
+			TenantApi.query$.me(
+				TenantApi.identity$.person(
+					TenantApi.person$.identityProviders(personIdentityProviderFragment),
+				),
+			),
+		)
+
+		return result.me.person?.identityProviders ?? []
+	}, [executor])
+}

package/src/hooks/queries/useMySessionsQuery.ts

@@ -0,0 +1,19 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType } from 'graphql-ts-client-api'
+import { TenantApiOptions, useTenantApi } from '../useTenantApi.js'
+import { useCallback } from 'react'
+
+const sessionFragment = TenantApi.sessionInfo$$
+
+export type MySessionsQueryResult = readonly ModelType<typeof sessionFragment>[]
+
+export const useMySessionsQuery = (options: TenantApiOptions = {}) => {
+	const executor = useTenantApi(options)
+	return useCallback(async ({}: {} = {}): Promise<MySessionsQueryResult> => {
+		const result = await executor(
+			TenantApi.query$.me(TenantApi.identity$.sessions(sessionFragment)),
+		)
+
+		return result.me.sessions
+	}, [executor])
+}

package/src/hooks/queries/usePersonQuery.ts

@@ -0,0 +1,35 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType, ParameterRef } from 'graphql-ts-client-api'
+import { TenantApiOptions, useTenantApi } from '../useTenantApi.js'
+import { useCallback } from 'react'
+
+const personFragment = TenantApi.person$$
+	.identity(
+		TenantApi.identity$$
+			.projects(
+				TenantApi
+					.identityProjectRelation$
+					.project(TenantApi.project$$)
+					.memberships(TenantApi.membership$$.variables(TenantApi.variableEntry$$)),
+			)
+			.sessions(TenantApi.sessionInfo$$),
+	)
+	.identityProviders(TenantApi.personIdentityProvider$$.identityProvider(TenantApi.identityProviderListItem$$))
+
+export type PersonQueryResult = ModelType<typeof personFragment> | null
+
+export type PersonQueryVariables = {
+	personId: string
+}
+
+export const usePersonQuery = (options: TenantApiOptions = {}) => {
+	const executor = useTenantApi(options)
+	return useCallback(async ({ personId }: PersonQueryVariables): Promise<PersonQueryResult> => {
+		const result = await executor(
+			TenantApi.query$.personById({ id: ParameterRef.of('personId') }, personFragment),
+			{ variables: { personId } },
+		)
+
+		return result.personById ?? null
+	}, [executor])
+}

package/src/hooks/queries/usePersonSessionsQuery.ts

@@ -0,0 +1,27 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType, ParameterRef } from 'graphql-ts-client-api'
+import { TenantApiOptions, useTenantApi } from '../useTenantApi.js'
+import { useCallback } from 'react'
+
+const sessionFragment = TenantApi.sessionInfo$$
+
+export type PersonSessionsQueryResult = readonly ModelType<typeof sessionFragment>[]
+
+export type PersonSessionsQueryVariables = {
+	personId: string
+}
+
+export const usePersonSessionsQuery = (options: TenantApiOptions = {}) => {
+	const executor = useTenantApi(options)
+	return useCallback(async ({ personId }: PersonSessionsQueryVariables): Promise<PersonSessionsQueryResult> => {
+		const result = await executor(
+			TenantApi.query$.personById(
+				{ id: ParameterRef.of('personId') },
+				TenantApi.person$.identity(TenantApi.identity$.sessions(sessionFragment)),
+			),
+			{ variables: { personId } },
+		)
+
+		return result.personById?.identity.sessions ?? []
+	}, [executor])
+}

package/src/hooks/queries/usePersonsQuery.ts

@@ -0,0 +1,37 @@
+import * as TenantApi from '@contember/graphql-client-tenant'
+import { ModelType, ParameterRef } from 'graphql-ts-client-api'
+import { TenantApiOptions, useTenantApi } from '../useTenantApi.js'
+import { useCallback } from 'react'
+
+const personFragment = TenantApi
+	.person$$
+	.identity(TenantApi.identity$$)
+
+export type PersonsQueryResult = readonly ModelType<typeof personFragment>[]
+
+export type PersonsQueryVariables = {
+	filter?: TenantApi.PersonsFilter
+	limit?: number
+	offset?: number
+}
+
+export const usePersonsQuery = (options: TenantApiOptions = {}) => {
+	const executor = useTenantApi(options)
+	return useCallback(async (variables: PersonsQueryVariables = {}): Promise<PersonsQueryResult> => {
+		const result = await executor(
+			TenantApi.query$.persons(
+				{
+					filter: ParameterRef.of('filter'),
+					limit: ParameterRef.of('limit'),
+					offset: ParameterRef.of('offset'),
+				},
+				personFragment,
+			),
+			{
+				variables,
+			},
+		)
+
+		return result.persons ?? []
+	}, [executor])
+}