feat(api): personal access tokens

integration-tests/testkit/seed.ts

@@ -60,7 +60,7 @@ import {
 import { execute } from './graphql';
 import { UpdateSchemaPolicyForOrganization, UpdateSchemaPolicyForProject } from './schema-policy';
 import { collect, CollectedOperation, legacyCollect } from './usage';
-import { generateUnique } from './utils';
+import { generateUnique, getServiceHost } from './utils';
 
 export function initSeed() {
   function createConnectionPool() {
@@ -87,6 +87,17 @@ export function initSeed() {
         },
       };
     },
+    async purgePersonalAccessTokenById(id: string) {
+      const registryAddress = await getServiceHost('server', 8082);
+      (
+        await fetch(
+          'http://' + registryAddress + '/cache/personal-access-token-cache/delete/' + id,
+          {
+            method: 'POST',
+          },
+        )
+      ).json();
+    },
     authenticate,
     generateEmail: () => userEmail(generateUnique()),
     async createOwner() {
@@ -880,7 +891,10 @@ export function initSeed() {
                 },
               };
             },
-            async inviteAndJoinMember(inviteToken: string = ownerToken) {
+            async inviteAndJoinMember(
+              memberRoleId: string | undefined = undefined,
+              inviteToken: string = ownerToken,
+            ) {
               const memberEmail = userEmail(generateUnique());
               const memberToken = await authenticate(memberEmail).then(r => r.access_token);
 
@@ -892,6 +906,7 @@ export function initSeed() {
                     },
                   },
                   email: memberEmail,
+                  memberRoleId,
                 },
                 inviteToken,
               ).then(r => r.expectNoGraphQLErrors());

integration-tests/testkit/utils.ts

@@ -111,3 +111,12 @@ export function assertNonNull<T>(
     throw new Error(message);
   }
 }
+
+export function assertNonNullish<T>(
+  value: T | null | undefined,
+  message = 'Expected non-null value.',
+): asserts value is T {
+  if (value === null) {
+    throw new Error(message);
+  }
+}

integration-tests/tests/api/organization/members.spec.ts

@@ -7,11 +7,12 @@
   const { createOrg } = await initSeed().createOwner();
   const { organization } = await createOrg();
 
   expect(organization.owner.role.permissions).toMatchInlineSnapshot(`
     [
       organization:describe,
       support:manageTickets,
       accessToken:modify,
+      personalAccessToken:modify,
       organization:modifySlug,
       auditLog:export,
       organization:delete,