Repository navigation

Field level auth - #38

Merged

jakubcolony merged 16 commits into

feat/field-level-auth

Jan 20, 2026

Commits on Dec 10, 2025
- bump ts to latest
  jakubcolony
  committed
  58b5313
- ensure auth runs only for target operation, not all
  jakubcolony
  committed
  4e57a3d
- fetch gql schema at init
  jakubcolony
  committed
  42a037c
- rough field-based auth
  jakubcolony
  committed
  215d59e
- delete unused file
  jakubcolony
  committed
  46cfa8f
- Make validateRequest work with fragments (spread & inline)
  jakubcolony
  committed
  f0f0d97
- Add missing types to rules to make UI work
  jakubcolony
  committed
  5516ad4
- Drop http-proxy-middleware. Use schema wrapping with graphql-shield
  jakubcolony
  committed
  a54b796
- Switch validation to shield permissions
  jakubcolony
  committed
  cfbf295
- First set of new-style permissions
  jakubcolony
  committed
  c99ae0b
- Add permissions checks for all relevant mutations
  jakubcolony
  committed
  61dcfd5
- Add permissions to queries
  jakubcolony
  committed
  0c0d4c0
- protect colonyMemberInvite, add auth to more queries
  jakubcolony
  committed
  82faae1
- Fix permissions for updating user mutation
  jakubcolony
  committed
  fd71dff
- Align forbidden response with previous implementation
  jakubcolony
  committed
  d1e49aa
- Allow reading Profile.email when updating own profile
  jakubcolony
  committed
  af789e3