activegraphql 0.3.1 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 6d8c3a3222f6be5ffc60f43b15adcd545fdbd9cb
-  data.tar.gz: b6e46df0201477df4552eaaccabf2f16fa3c9081
+  metadata.gz: 7d7b827f9b88c797862ac466ea064c90a7f1d310
+  data.tar.gz: 84a3cbb3591d9b0578148c035a05497c58b2c141
 SHA512:
-  metadata.gz: e72403cb55184b1b8008f95128ab7271234fdf571bdb0f185e23eca20f39c0188d7f9d2873347cc0a9e558257f04d73b03d240451a10f198aebfea4c888ce501
-  data.tar.gz: 027b1190f1659bd8f563aa70290294ebc0077bad4a530be870b136ccee465e20902e98baa55f761d0bb9ba69533116c86b65911a88ebeb86523532bbd381723b
+  metadata.gz: 565f09a87675ddf99b4d6408e5fb0479323778f44f14873aa7d19aac493c3c15c81b9533cf2d01b61d8c821eac731d76a70d604e62ae06928cc415ee94582d85
+  data.tar.gz: c63f44e7d151303ef0b3794ca305e9342a84909eb493d842ab18f5c2a5981175c1b5e939966995a334e41f9825c68397244ade7a803b04636a5b6a6ad8d18682

data/README.md

@@ -130,3 +130,39 @@ class MyModel < ActiveGraphQL::Model
                          max_interval: 1 }
 end
 ```
+
+### Authorization
+It's currently supporting simple bearer authorization using `auth` option.
+
+It basically offers two configuration params:
+
+- `strategy`: Currently, `bearer` strategy is the only one available.
+- `class`: The existing strategy uses your own custom class to encode a token (the class must provide at least an `.encode` class method).
+
+Your encoder class may look like that:
+```ruby
+class YourEncoderClass
+  def self.secret 
+    'your-safely-secured-secret'
+  end
+
+  def self.encode
+    # You could have custom stuff here like adding expiration to the payload.
+    payload = { exp: (Time.current.to_i + 100) }
+    JWT.encode(payload, secret)
+  end
+  
+  def self.decode(token)
+    JWT.decode(token, secret)
+  end
+end
+```
+
+Then your configuration would look like the next:
+```ruby
+class MyModel < ActiveGraphQL::Model
+  configure auth: { strategy: :bearer, class: YourEncoderClass }
+end
+```
+
+

data/lib/activegraphql/query.rb

@@ -18,12 +18,24 @@ module ActiveGraphQL
     end
 
     def request_options
-      { query: { query: to_s } }.tap do |opts|
-        opts.merge!(headers: { 'Accept-Language' => locale.to_s }) if locale.present?
+      {}.tap do |opts|
+        opts[:query] = request_params
+        opts[:headers] = request_headers if request_headers.present?
         opts.merge!(config[:http]) if config[:http].present?
       end
     end
 
+    def request_headers
+      {}.tap do |headers|
+        headers['Authorization'] = "Bearer #{auth_token}" if auth_header?
+        headers['Accept-Language'] = locale.to_s if locale.present?
+      end
+    end
+
+    def request_params
+      { query: to_s }
+    end
+
     def response_data
       return unless response['data']
       to_snake_case(response['data'][qaction])
@@ -73,6 +85,26 @@ module ActiveGraphQL
 
     private
 
+    def auth_header?
+      auth_strategy == :bearer
+    end
+
+    def auth_config
+      @auth_config ||= config[:auth] || {}
+    end
+
+    def auth_strategy
+      @auth_strategy ||= auth_config[:strategy]
+    end
+
+    # ActiveGraphQL currently supports bearer authorization with given class to encode.
+    # So if the "bearer" is not configured or the "class" is not present it's
+    # returning a nil token.
+    def auth_token
+      return if auth_config[:strategy] != :bearer || auth_config[:class].blank?
+      @auth_token ||= auth_config[:class].encode
+    end
+
     def to_snake_case(value)
       case value
       when Array

data/lib/activegraphql/version.rb

@@ -1,3 +1,3 @@
 module ActiveGraphQL
-  VERSION = '0.3.1'
+  VERSION = '0.4.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: activegraphql
 version: !ruby/object:Gem::Version
-  version: 0.3.1
+  version: 0.4.0
 platform: ruby
 authors:
 - Wakoopa
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2016-08-18 00:00:00.000000000 Z
+date: 2016-08-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler