chore: Allow global Jira Server integration provider

packages/server/graphql/mutations/addIntegrationProvider.ts

@@ -30,12 +30,19 @@ const addIntegrationProvider = {
     context: GQLContext
   ) => {
     const {authToken, dataLoader, socketId: mutatorId} = context
-    const {teamId} = input
+    const {teamId, scope} = input
     const operationId = dataLoader.share()
     const subOptions = {mutatorId, operationId}
 
     // AUTH
-    if (!isTeamMember(authToken, teamId) && !isSuperUser(authToken)) {
+    if (scope === 'global') {
+      if (!isSuperUser(authToken)) {
+        return {error: {message: 'Global scope requires su'}}
+      }
+      if (teamId !== 'aGhostTeam') {
+        return {error: {message: 'Global scope requires teamId to be aGhostTeam'}}
+      }
+    } else if (!isTeamMember(authToken, teamId) && !isSuperUser(authToken)) {
       return {error: {message: 'Must be on the team for which the provider is created'}}
     }
 

packages/server/graphql/public/typeDefs/_legacy.graphql

@@ -8631,6 +8631,7 @@ The scope this provider was created on by a user (excluding global scope)
 enum IntegrationProviderEditableScopeEnum {
   org
   team
+  global
 }
 
 """

packages/server/graphql/types/IntegrationProviderEditableScopeEnum.ts

@@ -1,13 +1,14 @@
 import {GraphQLEnumType} from 'graphql'
 
-export type TIntegrationProviderEditableScopeEnum = 'org' | 'team'
+export type TIntegrationProviderEditableScopeEnum = 'org' | 'team' | 'global'
 
 const IntegrationProviderEditableScopeEnum = new GraphQLEnumType({
   name: 'IntegrationProviderEditableScopeEnum',
   description: 'The scope this provider was created on by a user (excluding global scope)',
   values: {
     org: {},
-    team: {}
+    team: {},
+    global: {}
   }
 })
 

packages/server/graphql/types/JiraServerIntegration.ts

@@ -75,9 +75,11 @@ const JiraServerIntegration = new GraphQLObjectType<{teamId: string; userId: str
         const orgTeams = await dataLoader.get('teamsByOrgIds').load(orgId)
         const orgTeamIds = orgTeams.map(({id}) => id)
 
-        const providers = await dataLoader
-          .get('sharedIntegrationProviders')
-          .load({service: 'jiraServer', orgTeamIds, teamIds: [teamId]})
+        const providers = await dataLoader.get('sharedIntegrationProviders').load({
+          service: 'jiraServer',
+          orgTeamIds: [...orgTeamIds, 'aGhostTeam'],
+          teamIds: [teamId]
+        })
         return providers
       }
     },

packages/server/postgres/migrations/1716995191300_allowGlobalOAuth1Provider.ts

@@ -0,0 +1,19 @@
+import {Client} from 'pg'
+import getPgConfig from '../getPgConfig'
+
+export async function up() {
+  const client = new Client(getPgConfig())
+  await client.connect()
+  await client.query(`
+  DO $$
+  BEGIN
+    ALTER TABLE "IntegrationProvider"
+      DROP CONSTRAINT global_provider_must_be_oauth2;
+  END $$;
+  `)
+  await client.end()
+}
+
+export async function down() {
+  //noop, the constraint was a leftover and served no purpose
+}