@nhost/stripe-graphql-js
Version:
Stripe GraphQL API
43 lines • 1.96 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
exports.schema = exports.createStripeGraphQLServer = void 0;
const graphql_yoga_1 = require("graphql-yoga");
const schema_1 = require("./schema");
Object.defineProperty(exports, "schema", { enumerable: true, get: function () { return schema_1.schema; } });
const utils_1 = require("./utils");
const createStripeGraphQLServer = ({ cors, isAllowed, graphiql, maskedErrors = true } = {}) => {
const context = (context) => {
const { request } = context;
// user id
const userClaims = (0, utils_1.getUserClaims)(request);
// check if using correct `x-hasura-admin-secret` header
const adminSecretFromHeader = request.headers.get('x-hasura-admin-secret');
const adminSecret = process.env.NHOST_ADMIN_SECRET;
// check if the request is from Hasura
const nhostWebhookSecretFromHeader = request.headers.get('x-nhost-webhook-secret');
const nhostWebhookSecret = process.env.NHOST_WEBHOOK_SECRET;
const role = request.headers.get('x-hasura-role');
// variables
const isAdmin = adminSecretFromHeader === adminSecret ||
(role === 'admin' && nhostWebhookSecretFromHeader === nhostWebhookSecret);
// if no isAllowed function is provided, we will allow admin requests
const isAllowedFunction = isAllowed ||
((_stripeCustomerId, context) => {
return context.isAdmin;
});
// return
return Object.assign(Object.assign({}, context), { isAllowed: isAllowedFunction, userClaims,
isAdmin });
};
const yoga = (0, graphql_yoga_1.createYoga)({
cors,
graphiql,
context,
schema: schema_1.schema,
graphqlEndpoint: '*',
maskedErrors
});
return yoga;
};
exports.createStripeGraphQLServer = createStripeGraphQLServer;
//# sourceMappingURL=server.js.map