WPB-21768: Add SCIM get/filter groups response pagination

[eyeinsky]

Checklist

• Add a new entry in an appropriate subdirectory of changelog.d
• Read and follow the PR guidelines

[Copilot]

Pull request overview

This PR adds pagination support to the SCIM API's GET /Groups and filter groups endpoints. Previously, these endpoints returned all groups in a single response. The implementation adds startIndex and count query parameters following the SCIM specification's 1-based index pagination model.

Key Changes:

• Added startIndex and count parameters to SCIM group listing endpoints
• Implemented offset-based pagination in the database layer using SQL OFFSET/LIMIT
• Updated the internal Brig API to accept pagination parameters
• Added comprehensive integration tests for pagination behavior

Reviewed changes

Copilot reviewed 19 out of 19 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
libs/hscim/src/Web/Scim/Class/Group.hs	Extended GroupDB interface to accept startIndex and count parameters
libs/hscim/src/Web/Scim/Schema/ListResponse.hs	Added toPage helper function for creating paginated responses
libs/hscim/src/Web/Scim/Server/Mock.hs	Updated mock implementation to support pagination parameters
libs/wire-subsystems/src/Wire/ScimSubsystem.hs	Updated type signature to include pagination parameters
libs/wire-subsystems/src/Wire/ScimSubsystem/Interpreter.hs	Modified to construct ListResponse with correct pagination metadata
libs/wire-subsystems/src/Wire/UserGroupSubsystem.hs	Extended GetGroupsInternal to accept startIndex and count
libs/wire-subsystems/src/Wire/UserGroupSubsystem/Interpreter.hs	Implemented offset-based pagination using PaginationOffset
libs/wire-subsystems/src/Wire/UserGroupStore.hs	Removed unused helper functions toSortBy and mkPaginationState
libs/wire-subsystems/src/Wire/UserGroupStore/Postgres.hs	Added SQL offset clause and modified ORDER BY for offset pagination
libs/wire-subsystems/src/Wire/PaginationState.hs	Added PaginationOffset constructor and updated paginationClause
libs/wire-subsystems/src/Wire/Postgres.hs	Added offset query fragment helper function
libs/wire-subsystems/src/Wire/BrigAPIAccess.hs	Updated GetGroupsInternal signature with pagination parameters
libs/wire-subsystems/src/Wire/BrigAPIAccess/Rpc.hs	Added startIndex and count query parameters to HTTP request
libs/wire-subsystems/test/unit/Wire/MockInterpreters/UserGroupStore.hs	Implemented offset-based pagination in mock with sorting logic
libs/wire-api/src/Wire/API/Routes/Internal/Brig.hs	Added startIndex and count query parameters to route definition
services/brig/src/Brig/API/Internal.hs	Updated handler to accept and pass through pagination parameters
services/spar/src/Spar/Scim/Group.hs	Added Natural type conversions for pagination parameters
integration/test/Test/Spar.hs	Added comprehensive pagination test with multiple pages
integration/test/API/Spar.hs	Added filterScimUserGroupPaginate helper function

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[fisx]

I don't understand this error:

hscim> test/Test/Class/GroupSpec.hs:32:1: error: [GHC-66111] [-Wunused-imports, Werror=unused-imports]
hscim>     The import of ‘GHC.Stack’ is redundant
hscim>       except perhaps to import instances from ‘GHC.Stack’
hscim>     To import instances alone, use: import GHC.Stack()
hscim>    |
hscim> 32 | import GHC.Stack (HasCallStack)
hscim>    | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

if it were a "normal" constraint, HasCallStack should be required by assertFailure, but i don't think that's how HasCallStack is discharged.

just switch off the warning in this module? 76d187b

[akshaymankar]

I don't understand this error:

hscim> test/Test/Class/GroupSpec.hs:32:1: error: [GHC-66111] [-Wunused-imports, Werror=unused-imports]
hscim>     The import of ‘GHC.Stack’ is redundant
hscim>       except perhaps to import instances from ‘GHC.Stack’
hscim>     To import instances alone, use: import GHC.Stack()
hscim>    |
hscim> 32 | import GHC.Stack (HasCallStack)
hscim>    | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

if it were a "normal" constraint, HasCallStack should be required by assertFailure, but i don't think that's how HasCallStack is discharged.

just switch off the warning in this module? 76d187b

The warning is about the import, not about a redundant constraint.

we've taken care of all your suggestions 👍