shyft
Version:
Model driven GraphQL API framework
312 lines (311 loc) • 16 kB
JavaScript
;
var __assign = (this && this.__assign) || function () {
__assign = Object.assign || function(t) {
for (var s, i = 1, n = arguments.length; i < n; i++) {
s = arguments[i];
for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
t[p] = s[p];
}
return t;
};
return __assign.apply(this, arguments);
};
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
}) : (function(o, m, k, k2) {
if (k2 === undefined) k2 = k;
o[k2] = m[k];
}));
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
Object.defineProperty(o, "default", { enumerable: true, value: v });
}) : function(o, v) {
o["default"] = v;
});
var __importStar = (this && this.__importStar) || function (mod) {
if (mod && mod.__esModule) return mod;
var result = {};
if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
__setModuleDefault(result, mod);
return result;
};
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
return new (P || (P = Promise))(function (resolve, reject) {
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
step((generator = generator.apply(thisArg, _arguments || [])).next());
});
};
var __generator = (this && this.__generator) || function (thisArg, body) {
var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
function verb(n) { return function (v) { return step([n, v]); }; }
function step(op) {
if (f) throw new TypeError("Generator is already executing.");
while (_) try {
if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
if (y = 0, t) op = [op[0] & 2, t.value];
switch (op[0]) {
case 0: case 1: t = op; break;
case 4: _.label++; return { value: op[1], done: false };
case 5: _.label++; y = op[1]; op = [0]; continue;
case 7: op = _.ops.pop(); _.trys.pop(); continue;
default:
if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
if (t[2]) _.ops.pop();
_.trys.pop(); continue;
}
op = body.call(thisArg, _);
} catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
}
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.generateActions = exports.handlePermission = void 0;
var graphql_1 = require("graphql");
var _ = __importStar(require("lodash"));
var io_1 = require("./io");
var ProtocolGraphQL_1 = require("./ProtocolGraphQL");
var ObjectDataType_1 = require("../engine/datatype/ObjectDataType");
var ListDataType_1 = require("../engine/datatype/ListDataType");
var validation_1 = require("../engine/validation");
var Action_1 = require("../engine/action/Action");
var Permission_1 = require("../engine/permission/Permission");
var CustomError_1 = require("../engine/CustomError");
var index_1 = require("../index");
var AccessDeniedError = new CustomError_1.CustomError('Access denied', 'PermissionError', 403);
var fillSingleDefaultValues = function (param, payload, context) { return __awaiter(void 0, void 0, void 0, function () {
var ret, attributes, paramType_1;
return __generator(this, function (_a) {
switch (_a.label) {
case 0:
ret = payload;
if (typeof payload === 'undefined') {
if (param.defaultValue) {
ret = param.defaultValue({ payload: {}, context: context });
}
}
if (ObjectDataType_1.isObjectDataType(param.type)) {
attributes = param.type.getAttributes();
// eslint-disable-next-line no-use-before-define, @typescript-eslint/no-use-before-define
ret = fillNestedDefaultValues(attributes, ret, context);
}
if (!(ListDataType_1.isListDataType(param.type) && payload)) return [3 /*break*/, 2];
paramType_1 = param.type.getItemType();
return [4 /*yield*/, Promise.all(payload.map(function (itemPayload) { return __awaiter(void 0, void 0, void 0, function () {
var attributes;
return __generator(this, function (_a) {
switch (_a.label) {
case 0:
if (ObjectDataType_1.isObjectDataType(paramType_1)) {
attributes = paramType_1.getAttributes();
// eslint-disable-next-line no-use-before-define, @typescript-eslint/no-use-before-define
return [2 /*return*/, fillNestedDefaultValues(attributes, itemPayload, context)];
}
return [4 /*yield*/, fillSingleDefaultValues(paramType_1, itemPayload, context)];
case 1: return [2 /*return*/, _a.sent()];
}
});
}); }))];
case 1:
ret = _a.sent();
_a.label = 2;
case 2: return [2 /*return*/, ret];
}
});
}); };
var fillNestedDefaultValues = function (params, payload, context) { return __awaiter(void 0, void 0, void 0, function () {
var ret, paramNames;
return __generator(this, function (_a) {
switch (_a.label) {
case 0:
ret = __assign({}, payload);
paramNames = Object.keys(params);
return [4 /*yield*/, Promise.all(paramNames.map(function (paramName) { return __awaiter(void 0, void 0, void 0, function () {
var param, _a, _b;
return __generator(this, function (_c) {
switch (_c.label) {
case 0:
param = params[paramName];
_a = ret;
_b = paramName;
return [4 /*yield*/, fillSingleDefaultValues(param, ret[paramName], context)];
case 1:
_a[_b] = _c.sent();
return [2 /*return*/];
}
});
}); }))];
case 1:
_a.sent();
return [2 /*return*/, ret];
}
});
}); };
var fillDefaultValues = function (param, payload, context) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
return [2 /*return*/, fillSingleDefaultValues(param, payload, context)];
}); }); };
var handlePermission = function (context, action, input) { return __awaiter(void 0, void 0, void 0, function () {
var permission, userId, userRoles, _permission, _a, permissionWhere, lookupPermissionEntity, storageType, found;
return __generator(this, function (_b) {
switch (_b.label) {
case 0:
permission = action.getPermissions();
if (!permission) {
return [2 /*return*/, null];
}
userId = context.userId, userRoles = context.userRoles;
if (!index_1.isFunction(permission)) {
_permission = function () { return permission; };
}
else {
_permission = permission;
}
return [4 /*yield*/, Permission_1.buildActionPermissionFilter(_permission, userId, userRoles, action, input, context)];
case 1:
_a = _b.sent(), permissionWhere = _a.where, lookupPermissionEntity = _a.lookupPermissionEntity;
if (!permissionWhere) {
throw AccessDeniedError;
}
if (!(Object.keys(permissionWhere).length > 0)) return [3 /*break*/, 3];
storageType = lookupPermissionEntity.getStorageType();
return [4 /*yield*/, storageType.checkLookupPermission(lookupPermissionEntity, permissionWhere, context)];
case 2:
found = _b.sent();
if (!found) {
throw AccessDeniedError;
}
_b.label = 3;
case 3: return [2 /*return*/, permissionWhere];
}
});
}); };
exports.handlePermission = handlePermission;
var generateActions = function (graphRegistry, actionTypeFilter) {
var protocolConfiguration = ProtocolGraphQL_1.ProtocolGraphQL.getProtocolConfiguration();
var actions = {};
_.forEach(graphRegistry.actions, function (_a, actionName) {
var action = _a.action;
if (action.type !== actionTypeFilter) {
return;
}
var queryName = protocolConfiguration.generateActionTypeName(action);
var isMutation = action.type === Action_1.ACTION_TYPE_MUTATION;
var actionDataInputType;
var actionDataOutputType;
var actionInputType;
var inputArgs;
if (action.hasInput()) {
actionDataInputType = io_1.generateDataInput(actionName, action.getInput(), true);
}
if (action.hasInput() || isMutation) {
actionInputType = io_1.generateInput(actionName, actionDataInputType, true, isMutation);
inputArgs = {
input: {
description: 'Input argument for this action',
type: action.hasInput()
? new graphql_1.GraphQLNonNull(actionInputType)
: actionInputType,
},
};
}
if (action.hasOutput()) {
actionDataOutputType = io_1.generateDataOutput(actionName, action.getOutput(), graphRegistry, true);
}
var actionOutputType = io_1.generateOutput(actionName, actionDataOutputType, true, isMutation);
actions[queryName] = {
type: actionOutputType,
description: action.description + "\n" + (action.descriptionPermissions || ''),
args: inputArgs,
resolve: function (source, args, context, info) { return __awaiter(void 0, void 0, void 0, function () {
var payload, clientMutationId, input, result, error_1;
return __generator(this, function (_a) {
switch (_a.label) {
case 0:
if (!action.hasInput()) return [3 /*break*/, 3];
input = action.getInput();
payload = args.input.data;
clientMutationId = args.input.clientMutationId;
return [4 /*yield*/, fillDefaultValues(input, payload, context)];
case 1:
payload = _a.sent();
return [4 /*yield*/, validation_1.validateActionPayload(input, payload, action, context)];
case 2:
_a.sent();
_a.label = 3;
case 3:
if (isMutation) {
clientMutationId = args.input
? args.input.clientMutationId
: undefined;
}
return [4 /*yield*/, exports.handlePermission(context, action, payload)];
case 4:
_a.sent();
_a.label = 5;
case 5:
_a.trys.push([5, 11, , 14]);
if (!action.preProcessor) return [3 /*break*/, 7];
return [4 /*yield*/, action.preProcessor({
action: action,
source: source,
input: payload,
context: context,
info: info,
})];
case 6:
_a.sent();
_a.label = 7;
case 7: return [4 /*yield*/, action.resolve({
source: source,
input: payload,
context: context,
info: info,
})];
case 8:
result = _a.sent();
if (!action.postProcessor) return [3 /*break*/, 10];
return [4 /*yield*/, action.postProcessor({
result: result,
action: action,
source: source,
input: payload,
context: context,
info: info,
})];
case 9:
_a.sent();
_a.label = 10;
case 10: return [2 /*return*/, {
result: result,
clientMutationId: clientMutationId,
}];
case 11:
error_1 = _a.sent();
if (!action.postProcessor) return [3 /*break*/, 13];
return [4 /*yield*/, action.postProcessor({
error: error_1,
action: action,
source: source,
input: payload,
context: context,
info: info,
})];
case 12:
_a.sent();
_a.label = 13;
case 13: throw error_1;
case 14: return [2 /*return*/];
}
});
}); },
};
});
return actions;
};
exports.generateActions = generateActions;