graphql-pundit 0.3.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 4d29e967add746973f9b8b17927d9cb4929e01a3
-  data.tar.gz: 345db8210f01ccde612dab0e6d46138e6320e2ee
+  metadata.gz: b43400b6b949a08dc35c26cd42b42b164928291a
+  data.tar.gz: 04b488cd1da37c302fe8cf69f8f214cbc59d441c
 SHA512:
-  metadata.gz: 421f7515bad6de63018207fc5a8c0efc0b8e1450f2aef126ee4103d9fcba00a936183a2c6d89091349c57953b4b83da254e7a8596dbfd4a65b6187c100dc177c
-  data.tar.gz: f79f667733fb0c4515ac9917dee32220a8df70cc0c52c38911525face5421e39c17edd3f6aa6e48cfd80bd759f1b1db952996a837182ea980dd5e6b24338387f
+  metadata.gz: 980afb0446cc26117a1ffdb11c619d8d157cf24d1aeb41e6474f6618d22679d0fd4d3d225d91ac4d9121e8b3cfe851ba15f9a0f126352717754389bbac94dcef
+  data.tar.gz: 0bf87b21c14a0545cdf32c83763aa9ed8336d399dd404ac9a308efc836b9049134c1559a3ffd9d52d33106cdc0abb2e1db4ff97b34fd00ffbb8ccbe1465f9d54

data/.ruby-version

@@ -1 +1 @@
-2.4.1
+2.4.2

data/.travis.yml

@@ -4,7 +4,9 @@ dist: trusty
 language: ruby
 
 rvm:
-  - 2.4.1
+  - 2.2.7
+  - 2.3.4
+  - 2.4.2
 
 notifications:
   email: false

data/README.md

@@ -67,12 +67,21 @@ Now, in some cases you'll want to use a different policy, or in case of mutation
 
 ```ruby
 field :createUser
-  authorize! :create, User # or User.new; will use UserPolicy#create?
+  authorize! :create, policy: User # or User.new; will use UserPolicy#create?
   resolve ...
 end
 ```
 
-This will use the `:create?` method of the `UserPolicy`. You can also pass in objects instead of a class, if you wish to authorize the user for the specific object.
+This will use the `:create?` method of the `UserPolicy`. You can also pass in objects instead of a class (or symbol), if you wish to authorize the user for the specific object.
+
+If you want to pass a different value to the policy, you can use the keyword argument `record`:
+
+```ruby
+field :createUser
+  authorize! :create, record: User.new # or User.new; will use UserPolicy#create?
+  resolve ...
+end
+```
 
 You might have also noticed the use of `authorize!` instead of `authorize` in this example. The difference between the two is this:
 

data/graphql-pundit.gemspec

@@ -23,14 +23,14 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'graphql', '~> 1.6.4'
+  spec.add_dependency 'graphql', '>= 1.6.4', '< 1.8.0'
   spec.add_dependency 'pundit', '~> 1.1.0'
 
-  spec.add_development_dependency 'pry', '~> 0.10.4'
+  spec.add_development_dependency 'pry', '~> 0.11.0'
   spec.add_development_dependency 'bundler', '~> 1.14'
   spec.add_development_dependency 'rake', '~> 12.0'
   spec.add_development_dependency 'rspec', '~> 3.6'
-  spec.add_development_dependency 'rubocop', '~> 0.49.1'
-  spec.add_development_dependency 'simplecov', '~> 0.14.1'
+  spec.add_development_dependency 'rubocop', '~> 0.50.0'
+  spec.add_development_dependency 'simplecov', '~> 0.15.1'
   spec.add_development_dependency 'codecov', '~> 0.1.10'
 end

data/lib/graphql-pundit.rb

@@ -8,9 +8,10 @@ require 'graphql'
 # Define `authorize` and `authorize!` helpers
 module GraphQL
   def self.assign_authorize(raise_unauthorized)
-    lambda do |defn, query = nil, record = nil|
+    lambda do |defn, query = nil, policy: nil, record: nil|
       opts = {record: record,
               query: query || defn.name,
+              policy: policy,
               raise: raise_unauthorized}
       if query.respond_to?(:call)
         opts = {proc: query, raise: raise_unauthorized}

data/lib/graphql-pundit/instrumenters/authorization.rb

@@ -34,9 +34,16 @@ module GraphQL
                        else
                          query = options[:query].to_s + '?'
                          record = options[:record] || obj
-                         ::Pundit.authorize(ctx[current_user], record, query)
+                         policy = options[:policy] || record
+                         policy = ::Pundit::PolicyFinder.new(policy).policy!
+                         policy = policy.new(ctx[current_user], record)
+                         policy.public_send(query)
                        end
-              raise ::Pundit::NotAuthorizedError unless result
+              unless result
+                raise ::Pundit::NotAuthorizedError, query: query,
+                                                    record: record,
+                                                    policy: policy
+              end
               old_resolve.call(obj, args, ctx)
             rescue ::Pundit::NotAuthorizedError
               if options[:raise]

data/lib/graphql-pundit/version.rb

@@ -2,6 +2,6 @@
 
 module GraphQL
   module Pundit
-    VERSION = '0.3.0'
+    VERSION = '0.4.0'
   end
 end

metadata

@@ -1,29 +1,35 @@
 --- !ruby/object:Gem::Specification
 name: graphql-pundit
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 0.4.0
 platform: ruby
 authors:
 - Ontohub Core Developers
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2017-09-06 00:00:00.000000000 Z
+date: 2017-10-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: graphql
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 1.6.4
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 1.8.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 1.6.4
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 1.8.0
 - !ruby/object:Gem::Dependency
   name: pundit
   requirement: !ruby/object:Gem::Requirement
@@ -44,14 +50,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.10.4
+        version: 0.11.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.10.4
+        version: 0.11.0
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -100,28 +106,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.49.1
+        version: 0.50.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.49.1
+        version: 0.50.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.14.1
+        version: 0.15.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.14.1
+        version: 0.15.1
 - !ruby/object:Gem::Dependency
   name: codecov
   requirement: !ruby/object:Gem::Requirement
@@ -185,7 +191,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.11
+rubygems_version: 2.6.13
 signing_key: 
 specification_version: 4
 summary: Pundit authorization support for graphql