Skip to content

Workspaces: Enabled Graphql service for workspace authorization

What does this MR do and why?

We need to enable a graphql service that will return the username for the user that is the owner (creator) of the workspace. This is required for workspace authorization - i.e. when a user tries to access a workspace, we authenticate them using OAuth2.0, after that we need to confirm that the user has access to the workspace, we will do this by making a call to the graphql endpoint, receiving the users username and comparing that with what we got from the OAuth response.

Fixes #393020 (closed)

Screenshots or screen recordings

N/A

How to set up and validate locally

  1. Validate using graphql playground - the workspace resource should now have the user resource embedded within it.
  2. The resources being generated via the devfile library should have the workspace id so that auth proxy can be aware of the ID of the workspace.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Shekhar Patnaik

Merge request reports