graphql_authorizer 1.0.0 → 1.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 686bf1bf26471f700bc0cbf1187529aec7909a35d47cfe6e008e35202f343c8d
-  data.tar.gz: eaaecb01b4df704600d16d4cac6fd52c125a474ddfb1d7922dc8b608b552318c
+  metadata.gz: 386c9f4b8638041a3dde16dfc61714a8a445a976c5f5a77013334f66fd57fb72
+  data.tar.gz: 1d97b03642e65e0ecafac594a859edacf2fa183da933ef8d72644497a3d52b80
 SHA512:
-  metadata.gz: 10a5b233aa63bb16208a2b28f833aee425a42169dd58b2ba4ff0029b21883b7025fb3ccc3e99945bad173a7c9da450b98643276e393f5f6259f53f135adc3b9f
-  data.tar.gz: 63d7763556382ce209de0f33a9d606201a6c546dcdda3370a1aeb691a5dbeea2de01c27db4cb1fa0ee64889425888b0fdafaae027b6e7072606c2d8b1e0727dd
+  metadata.gz: 87c51130226e13cad005c2f049f151cf74e1695e7e55f2494a9a00ec19347a9c420b3bf4bb5d786ab2c0a05363ebdd29c11873f352a5b6187b04b9232a5231ce
+  data.tar.gz: 85a45f9fa33442e42d4ac94f4c91bba5b0e046213ff8c98ffe56ba69b7b5e21079870cbd099f28f41da469fa4a45f3254002dfdb06e871c0ee7b4c0433dc63e5

data/lib/generators/graphql_authorizer/templates/rack_attack.rb

@@ -1,5 +1,4 @@
 class Rack::Attack
-  bindin.pry
   ### Allow Localhost ###
   # Always allow requests from localhost
   # (blocklist & throttles are skipped)
@@ -9,9 +8,11 @@ class Rack::Attack
   end
 
   blocklist("check authorization") do |req|
-    graphiql_token = ENV.fetch("GRAPHIQL_TOKEN")
-    is_graphiql_request = req.env["HTTP_GRAPHIQL_TOKEN"] == graphiql_token
-    next if !req.path.start_with?("/graphql") || is_graphiql_request
+    # uncomment this line if you implement graphql_token validation
+    # graphiql_token = ENV.fetch("GRAPHIQL_TOKEN")
+    # is_graphiql_request = req.env["HTTP_GRAPHIQL_TOKEN"] == graphiql_token
+    # next if !req.path.start_with?("/graphql") || is_graphiql_request
+    next if !req.path.start_with?("/graphql")
     request_validator = GraphQLAuthorizer::Request.new(
       sig: req.env["HTTP_SIGNATURE"], # replace with Signature Header
       timestamp: req.env["HTTP_TIMESTAMP"] # replace with Time Stamp Header

data/lib/graphql_authorizer/version.rb

@@ -1,3 +1,3 @@
 module GraphQLAuthorizer
-  VERSION = "1.0.0".freeze
+  VERSION = "1.0.2".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: graphql_authorizer
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.2
 platform: ruby
 authors:
 - Peter John Alvarado
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2018-09-03 00:00:00.000000000 Z
+date: 2018-09-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: openssl