graphql-relay-walker 0.0.4 → 0.0.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 4c52e16e34e65cbfa824815b07db85cef5339ba3
-  data.tar.gz: f9758dc89317fbc1e6d51864c39a002e7ff9d724
+  metadata.gz: 6de0c51ff60413dd168b78817b850da65acd9031
+  data.tar.gz: d8d21b0df733e6b3e156b938b1ecf4a22c0133bb
 SHA512:
-  metadata.gz: 673c2823acfb35cacb4ad74b7c2d72582a31d2ae93b6e873f1bcb80008e62970dcf574d04db044021fa4b845ce4ad1bbf6b3df6ec17293c84983641b1dd0b54f
-  data.tar.gz: 18d576ac7b0ad37b292405555f90afc0c117d3132738944a7dbce8856ac883691b4b7698c6602896c69c69a7b944fcab7a8853f73799fc97646351b1cd38bda6
+  metadata.gz: 1f1d459b0349f433f5162f0db0a03e5cff04981ee99ab8fe434fbf139794bf983e42894ed3616cd2b9ec8e1af4b43af4d2286ed5367a1b862e6f15d1e4b407f6
+  data.tar.gz: d8a7f386dc179ce4af896d571f6aeb414180ce5e2e61f734755a06e638a7bf95d08a672dfeda29e86f0998ec2a1ca1baaf4f7a475b7b4a11952cf72854508659

data/graphql-relay-walker.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name        = "graphql-relay-walker"
-  s.version     = "0.0.4"
+  s.version     = "0.0.5"
   s.licenses    = ["MIT"]
   s.summary     = "A tool for traversing your GraphQL schema to proactively detect potential data access vulnerabilities."
   s.authors     = ["Ben Toews"]

data/lib/graphql/relay/walker/query_builder.rb

@@ -76,7 +76,7 @@ module GraphQL::Relay::Walker
     # created AST was invalid for having no selections.
     def inline_fragment_ast(type, with_children: true)
       make(GraphQL::Language::Nodes::InlineFragment) do |if_ast|
-        if_ast.type = type.name
+        if_ast.type = make_type_name_node(type.name)
 
         if with_children
           type.all_fields.each do |field|
@@ -106,7 +106,7 @@ module GraphQL::Relay::Walker
 
       # Bail unless we have the required arguments.
       return unless field.arguments.reject do |_, arg|
-        arg.type.valid_input?(nil)
+        valid_input?(arg.type, nil)
       end.all? do |name, _|
         arguments.key?(name)
       end
@@ -243,5 +243,26 @@ module GraphQL::Relay::Walker
     def random_alias
       6.times.map { (SecureRandom.random_number(26) + 97).chr }.join
     end
+
+    if GraphQL::VERSION >= "1.1.0"
+      def valid_input?(type, input)
+        allow_all = GraphQL::Schema::Warden.new(schema, ->(_) { false })
+        type.valid_input?(input, allow_all)
+      end
+    else
+      def valid_input?(type, input)
+        type.valid_input?(input)
+      end
+    end
+
+    if GraphQL::VERSION >= "1.0.0"
+      def make_type_name_node(type_name)
+        GraphQL::Language::Nodes::TypeName.new(name: type_name)
+      end
+    else
+      def make_type_name_node(type_name)
+        type_name
+      end
+    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: graphql-relay-walker
 version: !ruby/object:Gem::Version
-  version: 0.0.4
+  version: 0.0.5
 platform: ruby
 authors:
 - Ben Toews
@@ -102,7 +102,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.5.1
+rubygems_version: 2.5.1
 signing_key: 
 specification_version: 4
 summary: A tool for traversing your GraphQL schema to proactively detect potential