52bb1116ed
* feat(workspaces): add workspace sso feature flag * feat(workspaceSso): wip validate sso * feat(workspaces): validate and add sso provider to the workspace with user sso sessions * feat(workspaces): validate and add sso provider to the workspace with user sso sessions * WIP * fix(sso): restructure to handle all branches at end of flow * fix(sso): add and validate emails used for sso * fix(sso): park progress * chore(workspaces): review sso login/valdate * fix(sso): adjust validate url * chore(sso): auth header puzzle * fix(sso): happy-path config * chore(gql): gqlgen * fix(sso): almost almost * fix(sso): auth endpoint * a lil more terse * fix(sso): light at the end of the tunnel * fix(sso): improve catch block error messages * fix(sso): session lifespan => validUntil * fix(sso): I think we've got it * feat(sso): limited workspace values for public sso login * fix(sso): use factory functions * fix(sso): til decrypt is single-use * fix(sso): correct usage of access codes * fix(sso): use finalize middleware in all routes * chore(sso): cheeky tweak * fix(sso): move some types around * fix(sso): stencil final shape I'm sleepy * fix(sso): more factories more factories * fix(sso): on to final boss of factories * fix(sso): needs a haircut but she works * fix(sso): init rest w function, not side-effects * fix(sso): /authn => /sso * chore(sso): errors * chore(sso): test test test * chore(sso): test all the corners --------- Co-authored-by: Gergő Jedlicska <gergo@jedlicska.com> Co-authored-by: Mike Tasset <mike.tasset@gmail.com>
29 lines
886 B
TypeScript
29 lines
886 B
TypeScript
import { Roles, WorkspaceRoles } from '@speckle/shared'
|
|
import { WorkspaceAcl } from '@/modules/workspacesCore/domain/types'
|
|
import { WorkspaceRole } from '@/modules/core/graph/generated/graphql'
|
|
|
|
export const isUserLastWorkspaceAdmin = (
|
|
workspaceRoles: Pick<WorkspaceAcl, 'userId' | 'role'>[],
|
|
userId: string
|
|
): boolean => {
|
|
const workspaceAdmins = workspaceRoles.filter(
|
|
({ role }) => role === Roles.Workspace.Admin
|
|
)
|
|
const isUserAdmin = workspaceAdmins.some((role) => role.userId === userId)
|
|
|
|
return isUserAdmin && workspaceAdmins.length === 1
|
|
}
|
|
|
|
export const mapGqlWorkspaceRoleToMainRole = (
|
|
gqlRole: WorkspaceRole
|
|
): WorkspaceRoles => {
|
|
switch (gqlRole) {
|
|
case WorkspaceRole.Admin:
|
|
return Roles.Workspace.Admin
|
|
case WorkspaceRole.Member:
|
|
return Roles.Workspace.Member
|
|
case WorkspaceRole.Guest:
|
|
return Roles.Workspace.Guest
|
|
}
|
|
}
|