invite updates

Author: GregorShear

crates/control-plane-api/src/server/public/graphql/invite_links.rs

@@ -214,7 +214,13 @@ impl InviteLinksMutation {
         // invite recipient directly into the correct SSO flow.
         let tenant = catalog_prefix
             .as_str()
-            .split_at(catalog_prefix.as_str().find('/').expect("prefix must contain '/'") + 1)
+            .split_at(
+                catalog_prefix
+                    .as_str()
+                    .find('/')
+                    .expect("prefix must contain '/'")
+                    + 1,
+            )
             .0;
 
         let sso_provider_id = sqlx::query_scalar!(
@@ -292,7 +298,13 @@ impl InviteLinksMutation {
         // amr claim to verify the current session used SSO.
         let tenant = invite
             .catalog_prefix
-            .split_at(invite.catalog_prefix.find('/').expect("prefix must contain '/'") + 1)
+            .split_at(
+                invite
+                    .catalog_prefix
+                    .find('/')
+                    .expect("prefix must contain '/'")
+                    + 1,
+            )
             .0;
 
         let sso_blocking_tenant = sqlx::query_scalar!(
@@ -304,8 +316,7 @@ impl InviteLinksMutation {
               AND NOT EXISTS (
                 SELECT 1 FROM auth.identities ai
                 WHERE ai.user_id = $2
-                  AND ai.provider = 'sso'
-                  AND ai.provider_id = t.sso_provider_id::text
+                  AND ai.provider = 'sso:' || t.sso_provider_id::text
               )
             "#,
             tenant,
@@ -316,8 +327,7 @@ impl InviteLinksMutation {
 
         if let Some(tenant) = sso_blocking_tenant {
             return Err(async_graphql::Error::new(format!(
-                "Tenant {} requires SSO authentication. Please sign in with the organization's SSO provider to redeem this invite.",
-                tenant,
+                "Tenant {tenant} requires SSO authentication. Please sign in with the organization's SSO provider to redeem this invite."
             )));
         }