@pothos/plugin-scope-auth
Version:
A Pothos plugin for adding scope based authorization checks to your GraphQL Schema
75 lines (74 loc) • 3.19 kB
JavaScript
import { isThenable } from '@pothos/core';
export function createTypeAuthScopesStep(authScopes, type) {
if (typeof authScopes === 'function') {
return {
run: (state, parent, _args, _context, info)=>state.evaluateTypeScopeFunction(authScopes, type, parent, info),
errorMessage: `Not authorized to read fields for ${type}`
};
}
return {
run: (state, _parent, _args, _context, info)=>state.evaluateScopeMap(authScopes, info),
errorMessage: `Not authorized to read fields for ${type}`
};
}
export function createTypeGrantScopesStep(grantScopes, type, forField) {
return {
run: (state, parent, _args, context, info)=>state.grantTypeScopes(type, parent, forField ? info.path.prev : info.path, ()=>grantScopes(parent, context)),
errorMessage: `Unknown error creating grants for ${type}`
};
}
export function createFieldAuthScopesStep(authScopes) {
if (typeof authScopes === 'function') {
return {
errorMessage: (_parent, _args, _context, info)=>`Not authorized to resolve ${info.parentType}.${info.fieldName}`,
run: (state, parent, args, context, info)=>{
const scopeMap = authScopes(parent, args, context, info);
if (isThenable(scopeMap)) {
return scopeMap.then((resolved)=>state.evaluateScopeMap(resolved, info));
}
return state.evaluateScopeMap(scopeMap, info);
}
};
}
return {
errorMessage: (_parent, _args, _context, info)=>`Not authorized to resolve ${info.parentType}.${info.fieldName}`,
run: (state, _parent, _args, _context, info)=>state.evaluateScopeMap(authScopes, info)
};
}
export function createFieldGrantScopesStep(grantScopes) {
return {
errorMessage: (_parent, _args, _context, info)=>`Unknown issue generating grants for ${info.parentType}.${info.fieldName}`,
run: (state, parent, args, context, info)=>{
if (typeof grantScopes !== 'function') {
state.saveGrantedScopes(grantScopes, info.path);
return null;
}
const result = grantScopes(parent, args, context, info);
if (isThenable(result)) {
return result.then((resolved)=>{
state.saveGrantedScopes(resolved, info.path);
return null;
});
}
state.saveGrantedScopes(result, info.path);
return null;
}
};
}
export function createResolveStep(resolver) {
return {
errorMessage: (_parent, _args, _context, info)=>`Unknown issue resolving ${info.parentType}.${info.fieldName}`,
run: (_state, parent, args, context, info, setResolved)=>{
const result = resolver(parent, args, context, info);
if (isThenable(result)) {
return Promise.resolve(result).then((resolved)=>{
setResolved(resolved);
return null;
});
}
setResolved(result);
return null;
}
};
}
//# sourceMappingURL=steps.js.map