graphql-api 0.1.4 → 0.1.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 477daabc28be110eb038b74769ba03c0aafa0362
-  data.tar.gz: fbe73ba70e1eaf7f31c3b6e63eeb6c3f0f0d5be2
+  metadata.gz: 95f514ccff92debe339818cb597bb3be03a46537
+  data.tar.gz: 7032b93c8e4c5abefdf09e434ad01ef9f6c2fb01
 SHA512:
-  metadata.gz: ad96e49af75b0e1e957d681b07e0654da9f92bddcc9f191e373ac97cb80bc2398cdd346ef229e772a46210d0a176515cdfbe845e072fc9fbbba53cc10a212e55
-  data.tar.gz: 63d532a93ea3d90fe477d8111e257831ebbc25bce61b840208c8b313d75f13710dd01adba7feae304eceaa6ebc2156ffc34f9d6aa077869115a1e34719d85ca0
+  metadata.gz: 207a89f484b7dab769130910326067f0fa08bc0b83b843c28cb577ae952c631b3ce024c5c2b5e160b43107bc82870b2c53567432fa6b4897add62a77e6addb93
+  data.tar.gz: bf7290f3e1397193d4d14edc4d456508f4270dc8195bb74701428475a9b27f6f576490947de824470d786f437a95720de66d607ca0e178ae357d0c496b3596ad

data/README.md

@@ -149,6 +149,17 @@ GraphQL-Api will load in all models, query objects and commands from the rails
 app directory automatically. If you store these in a different location
 you can pass them in directly to the new command.
 
+### Policy Objects
+
+Policy objects can be instantiated for accessing models. These objects
+should meet the following interface methods.
+
+##### CRUD Policies
+
+The policy object should return true or false methods for all of the crud
+options allowing the mutation to take place, ie
+
+
 ### Model Objects
 
 Model objects are the core return value from GraphQL-Api. They can be a plain

data/lib/graphql/api/policy.rb

@@ -0,0 +1,37 @@
+require "graphql/api/unauthorized_exception"
+
+module GraphQL::Api
+  class Policy
+    attr_reader :ctx, :model
+
+    def initialize(ctx, model)
+      @model = model
+      @ctx = ctx
+    end
+
+    def user
+      ctx[:current_user]
+    end
+
+    def create?
+      true
+    end
+
+    def update?
+      true
+    end
+
+    def destroy?
+      true
+    end
+
+    def read?
+      true
+    end
+
+    def unauthorized!(msg=nil)
+      raise UnauthorizedException.new(msg)
+    end
+
+  end
+end

data/lib/graphql/api/resolvers/field.rb

@@ -5,10 +5,21 @@ module GraphQL::Api
       def initialize(model, name)
         @model = model
         @name = name
+        @policy_class = "#{model.name}Policy".safe_constantize
       end
 
       def call(obj, args, ctx)
-        if obj.respond_to?("access_#{@name}?")
+        if @policy_class
+          policy = @policy_class.new(ctx[:current_user], obj, ctx)
+          return nil unless policy.read?
+
+          if policy.respond_to?("access_#{@name}?")
+            obj.send(@name) if policy.send("access_#{@name}?")
+          else
+            obj.send(@name)
+          end
+          obj.send(@name) if policy.respond_to?("access_#{@name}?")
+        elsif obj.respond_to?("access_#{@name}?")
           obj.send(@name) if obj.send("access_#{@name}?", ctx)
         else
           obj.send(@name)

data/lib/graphql/api/resolvers/model_create_mutation.rb

@@ -2,13 +2,25 @@ module GraphQL::Api
   module Resolvers
     class ModelCreateMutation
 
-      def initialize(model)
+      def initialize(model, policy=nil)
         @model = model
+        @policy_class = "#{model.name}Policy".safe_constantize
       end
 
       def call(inputs, ctx)
+        if @policy_class
+          policy = @policy_class.new(ctx[:current_user], nil, ctx)
+          unless policy.create?
+            return {key => nil}
+          end
+        end
+
         item = @model.create!(inputs.to_h)
-        {@model.name.underscore.to_sym => item}
+        {key => item}
+      end
+
+      def key
+        @model.name.underscore.to_sym
       end
 
     end

data/lib/graphql/api/resolvers/model_delete_mutation.rb

@@ -4,12 +4,25 @@ module GraphQL::Api
 
       def initialize(model)
         @model = model
+        @policy_class = "#{model.name}Policy".safe_constantize
       end
 
       def call(inputs, ctx)
         item = @model.find(inputs[:id])
+
+        if @policy_class
+          policy = @policy_class.new(ctx[:current_user], item, ctx)
+          unless policy.destroy?
+            return {key => nil}
+          end
+        end
+
         item.destroy!
-        {"#{@model.name.underscore.to_sym}_id".to_sym => inputs[:id]}
+        {key => item}
+      end
+
+      def key
+        @model.name.underscore.to_sym
       end
 
     end

data/lib/graphql/api/resolvers/model_find_query.rb

@@ -4,14 +4,24 @@ module GraphQL::Api
 
       def initialize(model)
         @model = model
+        @policy_class = "#{model.name}Policy".safe_constantize
       end
 
       def call(obj, args, ctx)
         if @model.respond_to?(:graph_find)
-          @model.graph_find(args, ctx)
+          item = @model.graph_find(args, ctx)
         else
-          @model.find_by!(args.to_h)
+          item = @model.find_by!(args.to_h)
         end
+
+        if @policy_class
+          policy = @policy_class.new(ctx[:current_user], item, ctx)
+          unless policy.read?
+            return nil
+          end
+        end
+
+        item
       end
 
     end

data/lib/graphql/api/resolvers/model_update_mutation.rb

@@ -4,12 +4,25 @@ module GraphQL::Api
 
       def initialize(model)
         @model = model
+        @policy_class = "#{model.name}Policy".safe_constantize
       end
 
       def call(inputs, ctx)
         item = @model.find(inputs[:id])
+
+        if @policy_class
+          policy = @policy_class.new(ctx[:current_user], item, ctx)
+          unless policy.destroy?
+            return {key => nil}
+          end
+        end
+
         item.update!(inputs.to_h)
-        {@model.name.underscore.to_sym => item}
+        {key => item}
+      end
+
+      def key
+        @model.name.underscore.to_sym
       end
 
     end

data/lib/graphql/api/schema.rb

@@ -139,13 +139,15 @@ module GraphQL::Api
     def delete_mutation(model_class)
       return nil unless model_class < ActiveRecord::Base
 
+      object_types = @types
+
       GraphQL::Relay::Mutation.define do
         name "Delete#{model_class.name}"
         description "Delete #{model_class.name}"
 
         input_field :id, !types.ID
 
-        return_field "#{model_class.name.underscore}_id".to_sym, types.ID
+        return_field model_class.name.underscore.to_sym, object_types[model_class]
         resolve Resolvers::ModelDeleteMutation.new(model_class)
       end
     end

data/lib/graphql/api/unauthorized_exception.rb

@@ -0,0 +1,4 @@
+module GraphQL::Api
+  class UnauthorizedException < Exception
+  end
+end

data/lib/graphql/api/version.rb

@@ -1,5 +1,5 @@
 module GraphQL
   module Api
-    VERSION = '0.1.4'
+    VERSION = '0.1.5'
   end
 end

data/lib/graphql/api.rb

@@ -1,4 +1,5 @@
 require "graphql/api/version"
+require "graphql/api/policy"
 require "graphql/api/schema"
 
 module GraphQL

metadata

@@ -1,47 +1,41 @@
 --- !ruby/object:Gem::Specification
 name: graphql-api
 version: !ruby/object:Gem::Version
-  version: 0.1.4
+  version: 0.1.5
 platform: ruby
 authors:
 - Colin Walker
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-10-03 00:00:00.000000000 Z
+date: 2016-11-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 5.0.0
     - - ">="
       - !ruby/object:Gem::Version
-        version: 5.0.0.1
+        version: 4.2.6
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 5.0.0
     - - ">="
       - !ruby/object:Gem::Version
-        version: 5.0.0.1
+        version: 4.2.6
 - !ruby/object:Gem::Dependency
   name: graphql
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - '='
       - !ruby/object:Gem::Version
         version: 0.19.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - '='
       - !ruby/object:Gem::Version
         version: 0.19.0
 - !ruby/object:Gem::Dependency
@@ -71,6 +65,7 @@ files:
 - lib/graphql/api.rb
 - lib/graphql/api/command_type.rb
 - lib/graphql/api/helpers.rb
+- lib/graphql/api/policy.rb
 - lib/graphql/api/query_type.rb
 - lib/graphql/api/resolvers/command_mutation.rb
 - lib/graphql/api/resolvers/field.rb
@@ -82,6 +77,7 @@ files:
 - lib/graphql/api/resolvers/query_object_query.rb
 - lib/graphql/api/schema.rb
 - lib/graphql/api/schema_error.rb
+- lib/graphql/api/unauthorized_exception.rb
 - lib/graphql/api/version.rb
 homepage: https://github.com/coldog/graphql-api
 licenses: