feat: support features claim in graph tokens

controlplane/src/core/bufservices/federated-graph/createFederatedGraphToken.ts

@@ -13,6 +13,7 @@ import { DefaultNamespace } from '../../repositories/NamespaceRepository.js';
 import type { RouterOptions } from '../../routes.js';
 import { enrichLogger, getLogger, handleError } from '../../util.js';
 import { UnauthorizedError } from '../../errors/errors.js';
+import { OrganizationRepository } from '../../repositories/OrganizationRepository.js';
 
 export function createFederatedGraphToken(
   opts: RouterOptions,
@@ -71,13 +72,25 @@ export function createFederatedGraphToken(
       };
     }
 
+    const orgRepo = new OrganizationRepository(logger, opts.db, opts.billingDefaultPlanId);
+    const splitConfigFeature = await orgRepo.getFeature({
+      organizationId: authContext.organizationId,
+      featureId: 'split-config-loading',
+    });
+
+    const features: string[] = [];
+    if (splitConfigFeature?.enabled) {
+      features.push('split-config-loading');
+    }
+
     const tokenValue = await signJwtHS256<GraphApiKeyJwtPayload>({
       secret: opts.jwtSecret,
       token: {
         iss: authContext.userId,
         federated_graph_id: graph.id,
         aud: audiences.cosmoGraphKey, // to distinguish from other tokens
         organization_id: authContext.organizationId,
+        features: features.length > 0 ? features : undefined,
       },
     });
 

controlplane/src/core/repositories/OrganizationRepository.ts

@@ -1420,6 +1420,7 @@ export class OrganizationRepository {
       sso: false,
       'subgraph-check-extensions': false,
       support: false,
+      'split-config-loading': false,
     };
 
     for (const feature of features) {

controlplane/src/types/index.ts

@@ -28,7 +28,8 @@ export type FeatureIds =
   | 'security'
   | 'sso'
   | 'subgraph-check-extensions'
-  | 'support';
+  | 'support'
+  | 'split-config-loading';
 
 export type Features = {
   [key in FeatureIds]: Feature;
@@ -498,6 +499,7 @@ export type AuthContext = {
 export interface GraphApiKeyJwtPayload extends JWTPayload {
   federated_graph_id: string;
   organization_id: string;
+  features?: string[];
 }
 
 export interface PluginAccess {