UNPKG

@neo4j/graphql

Version:

A GraphQL to Cypher query execution layer for Neo4j and JavaScript GraphQL implementations

97 lines 4.65 kB
"use strict"; /* * Copyright (c) "Neo4j" * Neo4j Sweden AB [http://neo4j.com] * * This file is part of Neo4j. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ Object.defineProperty(exports, "__esModule", { value: true }); exports.AuthorizationFactoryDeprecated = void 0; const utils_1 = require("../../../utils/utils"); const populate_where_params_1 = require("../../authorization/utils/populate-where-params"); const AuthorizationFiltersDeprecated_1 = require("../ast/filters/authorization-filters/AuthorizationFiltersDeprecated"); const AuthorizationRuleFilter_1 = require("../ast/filters/authorization-filters/AuthorizationRuleFilter"); const is_concrete_entity_1 = require("../utils/is-concrete-entity"); /** * @deprecated This class is deprecated and superseded by `AuthorizationFactory`, this is to due to kept compatibility with the old `AuthorizationFilters` class, still used by the legacy translation code. **/ class AuthorizationFactoryDeprecated { constructor(filterFactory) { this.filterFactory = filterFactory; } // TODO: rename this to getProjectionAuthFilters getAuthFilters({ attributes, ...params }) { const AuthorizationFiltersDeprecated = this.createAuthFilterRule({ ...params, authAnnotation: params.entity.annotations.authorization, }); const authorizationValidate = this.createAuthValidateRule({ ...params, authAnnotation: params.entity.annotations.authorization, when: "BEFORE", }); const attributeAuthFilters = []; const attributeAuthValidate = []; if (attributes?.length && (0, is_concrete_entity_1.isConcreteEntity)(params.entity)) { for (const attribute of attributes) { attributeAuthFilters.push(this.createAuthFilterRule({ ...params, authAnnotation: attribute.annotations.authorization, })); attributeAuthValidate.push(this.createAuthValidateRule({ ...params, when: "BEFORE", authAnnotation: attribute.annotations.authorization, })); } } return (0, utils_1.filterTruthy)([ AuthorizationFiltersDeprecated, ...attributeAuthFilters, authorizationValidate, ...attributeAuthValidate, ]); } createAuthFilterRule({ authAnnotation, ...params }) { const whereFilters = this.createAuthRuleFilter(params, authAnnotation?.filter ?? []); if (!whereFilters.length) { return; } return new AuthorizationFiltersDeprecated_1.AuthorizationFiltersDeprecated({ validationFilters: [], whereFilters }); } createAuthValidateRule({ authAnnotation, when, conditionForEvaluation, ...params }) { const rules = authAnnotation?.validate?.filter((rule) => rule.when.includes(when)); const validationFilters = this.createAuthRuleFilter(params, rules ?? []); if (!validationFilters.length) { return; } return new AuthorizationFiltersDeprecated_1.AuthorizationFiltersDeprecated({ validationFilters, whereFilters: [], conditionForEvaluation }); } createAuthRuleFilter(params, rules) { return rules .filter((rule) => rule.operations.some((operation) => params.operations.includes(operation))) .map((rule) => { const populatedWhere = (0, populate_where_params_1.populateWhereParams)({ where: rule.where, context: params.context }); const nestedFilters = this.filterFactory.createAuthFilters({ ...params, populatedWhere }); return new AuthorizationRuleFilter_1.AuthorizationRuleFilter({ requireAuthentication: rule.requireAuthentication, filters: nestedFilters, isAuthenticatedParam: params.context.authorization.isAuthenticatedParam, }); }); } } exports.AuthorizationFactoryDeprecated = AuthorizationFactoryDeprecated; //# sourceMappingURL=AuthorizationFactoryDeprecated.js.map