WIP

graphql/auth/auth.edges.graphql

@@ -0,0 +1,9 @@
+type AuthOauth2ClientToAuthRealmEdge {
+  data: AuthRealm
+  error: AuthOauth2ClientToAuthRealmError
+}
+
+type AuthOauth2ClientToAuthOauth2ScopesEdge {
+  data: [AuthOauth2Scope]
+  error: AuthOauth2ClientToAuthOauth2ScopesError
+}

graphql/auth/auth.enumerations.graphql

@@ -0,0 +1,4 @@
+enum AuthOauth2ClientTypeEnum {
+  CONFIDENTIAL
+  PUBLIC
+}

graphql/auth/auth.errors.graphql

@@ -0,0 +1,7 @@
+enum AuthOauth2ClientToAuthRealmError {
+  UNKNOWN
+}
+
+enum AuthOauth2ClientToAuthOauth2ScopesError {
+  UNKNOWN
+}

graphql/auth/auth.types.graphql

@@ -0,0 +1,20 @@
+type AuthRealm {
+  urn: ID!
+  name: String
+  createdAt: String
+}
+
+type AuthOauth2Client {
+  urn: ID!
+  clientId: String!
+  clientType: AuthOauth2ClientTypeEnum!
+  clientSecret: String
+
+  Realm: AuthOauth2ClientToAuthRealmEdge
+  Scopes: AuthOauth2ClientToAuthOauth2Scopes
+}
+
+type AuthOauth2Scope {
+  urn: ID!
+  scope: String
+}

graphql/identity/identity.enumerations.graphql

@@ -1,3 +1,10 @@
 enum IdentityAuthDeviceTypeEnum {
   PASSWORD
+  APPLICATION_PASSWORD
+}
+
+enum IdentityGroupRoleEnum {
+  SYSTEM_ADMIN
+  REALM_ADMIN
+  STANDARD
 }

graphql/identity/identity.queries.graphql

@@ -0,0 +1,10 @@
+type IdentityUserOutput {
+  error: 
+  data: IdentityUser
+}
+
+type Query {
+  identityUsers()
+  identityUser(urn: String!): IdentityUserOutput!
+  myUser
+}

graphql/identity/identity.types.graphql

@@ -1,6 +1,7 @@
 type IdentityGroup {
   urn: ID!
   isAdmin: Boolean!
+  role: IdentityGroupRoleEnum!
   name: String
 
   Users: IdentityGroupToIdentityUserEdge!