add createUser mutation

assets/src/generated/graphql.ts

@@ -5370,6 +5370,7 @@ export type RootMutationType = {
   createStackDefinition?: Maybe<StackDefinition>;
   createThread?: Maybe<ChatThread>;
   createUpgradePolicy?: Maybe<UpgradePolicy>;
+  createUser?: Maybe<User>;
   createWebhook?: Maybe<Webhook>;
   deleteAccessToken?: Maybe<AccessToken>;
   deleteCatalog?: Maybe<Catalog>;
@@ -5792,6 +5793,11 @@ export type RootMutationTypeCreateUpgradePolicyArgs = {
 };
 
 
+export type RootMutationTypeCreateUserArgs = {
+  attributes: UserAttributes;
+};
+
+
 export type RootMutationTypeCreateWebhookArgs = {
   attributes: WebhookAttributes;
 };

go/client/graph/users.graphql

@@ -4,6 +4,12 @@ query GetUser($email: String!) {
     }
 }
 
+mutation CreateUser($attributes: UserAttributes!) {
+    createUser(attributes: $attributes) {
+        ...UserFragment
+    }
+}
+
 mutation UpdateUser($id: ID, $attributes: UserAttributes!) {
     updateUser(id: $id, attributes: $attributes) {
         ...UserFragment

lib/console/graphql/resolvers/user.ex

@@ -194,6 +194,9 @@ defmodule Console.GraphQl.Resolvers.User do
   def update_user(%{attributes: attrs}, %{context: %{current_user: user}}),
     do: Users.update_user(attrs, user)
 
+  def create_user(%{attributes: attrs}, _),
+    do: Users.create_user(attrs)
+
   def delete_user(%{id: id}, %{context: %{current_user: user}}),
     do: Users.delete_user(id, user)
 

lib/console/graphql/users.ex

@@ -491,6 +491,14 @@ defmodule Console.GraphQl.Users do
       safe_resolve &User.create_invite/2
     end
 
+    field :create_user, :user do
+      middleware Authenticated
+      middleware AdminRequired
+      arg :attributes, non_null(:user_attributes)
+
+      resolve &User.create_user/2
+    end
+
     field :create_service_account, :user do
       middleware Authenticated
       middleware AdminRequired

schema/schema.graphql

@@ -494,6 +494,8 @@ type RootMutationType {
 
   createInvite(attributes: InviteAttributes!): Invite
 
+  createUser(attributes: UserAttributes!): User
+
   createServiceAccount(attributes: ServiceAccountAttributes!): User
 
   updateServiceAccount(id: ID!, attributes: ServiceAccountAttributes!): User

test/console/graphql/mutations/user_mutations_test.exs

@@ -24,6 +24,35 @@ defmodule Console.GraphQl.UserMutationsTest do
     end
   end
 
+  describe "createUser" do
+    test "admins can create users" do
+      {:ok, %{data: %{"createUser" => user}}} = run_query("""
+        mutation Create($attrs: UserAttributes!) {
+          createUser(attributes: $attrs) {
+            id
+            email
+          }
+        }
+      """, %{"attrs" => %{"email" => "someone@example.com", "name" => "Some User"}}, %{current_user: admin_user()})
+
+      assert user["email"] == "someone@example.com"
+    end
+
+    test "nonadmins cannot create users" do
+      {:ok, %{errors: [_ | _]}} = run_query("""
+        mutation Create($attrs: UserAttributes!) {
+          createUser(attributes: $attrs) {
+            id
+            email
+          }
+        }
+      """, %{"attrs" => %{
+        "email" => "someone@example.com",
+        "name" => "Some User"
+      }}, %{current_user: insert(:user)})
+    end
+  end
+
   describe "logout" do
     test "it will wipe refresh tokens" do
       user = insert(:user)