feat: guest + user permissions

server/graph/schemas/authentication.graphql

@@ -43,7 +43,8 @@ type AuthenticationMutation {
   ): AuthenticationRegisterResponse
 
   updateStrategies(
-    strategies: [AuthenticationStrategyInput]
+    strategies: [AuthenticationStrategyInput]!
+    config: AuthenticationConfigInput
   ): DefaultResponse @auth(requires: ["manage:system"])
 }
 
@@ -88,3 +89,9 @@ input AuthenticationStrategyInput {
   domainWhitelist: [String]!
   autoEnrollGroups: [Int]!
 }
+
+input AuthenticationConfigInput {
+  audience: String!
+  tokenExpiration: String!
+  tokenRenewal: String!
+}