@webresto/graphql 1.3.7 → 1.3.8

package/lib/graphqlHelper.js

@@ -1,22 +1,18 @@
 "use strict";
-/// <reference path="../../core/libs/globalTypes.ts"/>
-var _a;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.setWhiteList = exports.addModelResolver = exports.addDirResolvers = exports.addAllSailsModels = exports.addToReplaceList = exports.addCustomField = exports.addToBlackList = exports.getSchema = exports.addResolvers = exports.addType = exports.addModel = void 0;
 const _ = require("lodash");
 const worktime_1 = require("@webresto/worktime");
-const getEmitter_1 = require("@webresto/core/libs/getEmitter");
 const WLCriteria = require("waterline-criteria");
-const fs = require('fs');
-const path = require('path');
+const jwt_1 = require("./jwt");
+const fs = require("fs");
+const path = require("path");
 const scalarTypes = {
     string: "String",
-    text: "String",
-    date: "String",
-    datetime: "String",
-    integer: "Int",
-    float: "Float",
+    number: "Float",
     boolean: "Boolean",
+    // json: "Json",
+    // "array": "Array",
 };
 /*
 const typeDefsExample = {
@@ -78,8 +74,8 @@ function addModel(modelName) {
     models.add(modelName.toLowerCase());
 }
 exports.addModel = addModel;
-function addType(typeString) {
-    schemaTypes.push(typeString);
+function addType(type) {
+    schemaTypes.push(type);
 }
 exports.addType = addType;
 /**
@@ -87,7 +83,7 @@ exports.addType = addType;
  *
  * @param resolvers
  * resolverExample = {
- *      def: "user(id: String)",
+ *      def: "user(id: string)",
  *      fn: function (parent, args, context) {
  *          return User.find({id: args.id})
  *      }
@@ -127,7 +123,7 @@ function addToBlackList(list) {
 exports.addToBlackList = addToBlackList;
 /**
  * Добавляет в указаную модель новое поле
- * Пример: addCustomField("Order", "customField: String")
+ * Пример: addCustomField("Order", "customField: string")
  *
  * @param model string
  * @param field string
@@ -173,8 +169,7 @@ exports.addDirResolvers = addDirResolvers;
  */
 function getSchema() {
     Object.keys(whiteList).forEach(modelname => {
-        var _a, _b;
-        if (((_b = (_a = sails.models[modelname]) === null || _a === void 0 ? void 0 : _a.graphql) === null || _b === void 0 ? void 0 : _b.public) !== false) {
+        if (sails.models[modelname]?.graphql?.public !== false) {
             addModelResolver(modelname);
         }
     });
@@ -208,25 +203,34 @@ function createType(model) {
         }
         let scalarType;
         if (attributes[prop].type) {
-            if (scalarTypes[attributes[prop].type.toLowerCase()]) {
-                scalarType = scalarTypes[attributes[prop].type.toLowerCase()];
+            // TODO: make method  add AddModelFieldType(path, type) for pass custom type for specific model
+            if (modelName.toLowerCase() === "user" && prop === "phone") {
+                scalarType = "Phone";
             }
             else {
-                scalarType = firstLetterToUpperCase(attributes[prop].type);
-                schemaScalars.add(scalarType);
+                if (scalarTypes[attributes[prop].type.toLowerCase()]) {
+                    scalarType = scalarTypes[attributes[prop].type.toLowerCase()];
+                }
+                else {
+                    scalarType = firstLetterToUpperCase(attributes[prop].type);
+                    schemaScalars.add(scalarType);
+                }
             }
             type += '  ' + prop + ': ' + scalarType + '\n';
         }
         // MODEL SCHEMA GENERATION
         if (attributes[prop].model) {
             let relationModel = sails.models[attributes[prop].model.toLowerCase()];
-            scalarType = scalarTypes[relationModel.attributes[relationModel.primaryKey].type];
+            scalarType = scalarTypes[relationModel.attributes[relationModel.primaryKey].type.toLowerCase()];
             const name = sails.models[attributes[prop].model.toLowerCase()].globalId;
             type += `  ${prop}: ${name}\n`;
+            // Virtual Id field
+            type += `  ${prop}Id: ${scalarType}\n`;
         }
         // COLLECTION SCHEMA GENERATION
         if (attributes[prop].collection) {
-            scalarType = scalarTypes[attributes[sails.models[attributes[prop].collection.toLowerCase()].primaryKey].type.toLowerCase()];
+            let collectionModel = sails.models[attributes[prop].collection.toLowerCase()];
+            scalarType = scalarTypes[collectionModel.attributes[collectionModel.primaryKey].type.toLowerCase()];
             const name = sails.models[attributes[prop].collection.toLowerCase()].globalId;
             type += `  ${prop}: [${name}]\n`;
         }
@@ -235,7 +239,7 @@ function createType(model) {
         type += `  ${customFields[modelName]}\n`;
     }
     if (!attributes.customData) {
-        type += '""" autogenerated """  customData: Json';
+        type += `""" [autogenerated] ${isAuthRequired(modelName) ? '\n[auth required]' : ''}"""  customData: Json`;
     }
     type += '}\n';
     return type;
@@ -299,9 +303,8 @@ function createSchema(typeDefsObj) {
 const whiteList = {
 // group: ['subscription', 'query'] // order - modelname , 'subscription' - resolver type
 };
-const userAuth = typeof ((_a = sails.config.restographql) === null || _a === void 0 ? void 0 : _a.authService) === 'function' ? sails.config.restographql.authService : null;
 let modelsResolvers = { Query: {} };
-const { withFilter } = require("apollo-server");
+const apollo_server_1 = require("apollo-server");
 /**
  * Патчит waterline criteria во время автогенерации
  *
@@ -360,38 +363,60 @@ function addModelResolver(modelname) {
         models.add(modelname); // make schema Type for Model
         const methodName = firstLetterToLowerCase(modelName);
         let resolverQuery = {
-            def: `""" autogenerated """ ${methodName}(criteria: Json): [${modelName}]`,
+            def: `""" [autogenerated] ${isAuthRequired(modelname) ? '\n[auth required]' : ''}""" ${methodName}(criteria: Json, skip: Int, limit: Int, sort: String): [${modelName}]`,
             fn: async function (parent, args, context) {
                 let criteria = args.criteria || {};
                 criteria = sanitizeCriteria(modelname, criteria);
                 // If model has User field need auth
-                if (sails.models[modelname].attributes.user) {
-                    if (userAuth) {
-                        let user = await userAuth(context.connectionParams.authorization);
-                        if (user.id) {
-                            criteria.user = user.id;
+                if (isAuthRequired(modelName)) {
+                    let auth = await jwt_1.JWTAuth.verify(context.connectionParams.authorization);
+                    if (auth.userId && UserDevice.checkSession(auth.sessionId, auth.userId, { lastIP: "IP", userAgent: context.connectionParams["user-agent"] })) {
+                        if (modelName.toLowerCase() === "user") {
+                            criteria.id = auth.userId;
+                        }
+                        else {
+                            criteria.user = auth.userId;
                         }
-                        else
-                            return null;
                     }
                     else {
-                        return null;
+                        throw 'Authorization failed';
                     }
                 }
-                let query = { where: criteria };
+                let query;
+                if (criteria.where === undefined) {
+                    query = { where: criteria };
+                }
+                else {
+                    query = criteria;
+                }
                 //sorting
-                if (sails.models[modelname].attributes.order) {
-                    query.sort = 'order ASC';
+                if (sails.models[modelname].attributes.sortOrder) {
+                    query.sort = 'sortOrder ASC';
                 }
-                let result = await sails.models[modelname].find(query);
-                getEmitter_1.default().emit(`graphql-query-${modelname}`, result);
-                //workTime filter
-                if (sails.models[modelname].attributes.workTime) {
+                let ORMrequest = sails.models[modelname].find(query);
+                if (args.skip) {
+                    ORMrequest.skip(args.skip);
+                }
+                if (args.limit) {
+                    ORMrequest.limit(args.limit);
+                }
+                if (args.sort) {
+                    ORMrequest.sort(args.sort);
+                }
+                else {
+                    if (sails.models[modelname].attributes.sortOrder) {
+                        ORMrequest.sort('sortOrder ASC');
+                    }
+                }
+                let result = await ORMrequest;
+                emitter.emit(`graphql-query-${modelname}`, result);
+                //worktime filter
+                if (sails.models[modelname].attributes.worktime) {
                     result = result.filter(record => {
-                        if (!record.workTime)
+                        if (!record.worktime)
                             return true;
                         try {
-                            return (worktime_1.WorkTimeValidator.isWorkNow({ workTime: record.workTime })).workNow;
+                            return (worktime_1.WorkTimeValidator.isWorkNow({ worktime: record.worktime })).workNow;
                         }
                         catch (error) {
                             sails.log.error("Graphql > helper > error: ", error);
@@ -399,12 +424,58 @@ function addModelResolver(modelname) {
                     });
                 }
                 result.forEach(item => {
-                    getEmitter_1.default().emit(`http-api:before-send-${modelname.toLowerCase()}`, item);
+                    emitter.emit(`http-api:before-send-${modelname.toLowerCase()}`, item);
                 });
                 return result;
             },
         };
         modelsResolvers.Query[methodName] = resolverQuery;
+        let resolverQueryCount = {
+            def: `""" [autogenerated] ${isAuthRequired(modelname) ? '\n[auth required]' : ''}""" ${methodName}Count(criteria: Json): Int`,
+            fn: async function (parent, args, context) {
+                let criteria = args.criteria || {};
+                criteria = sanitizeCriteria(modelname, criteria);
+                // If model has User field need auth
+                if (isAuthRequired(modelName)) {
+                    let auth = await jwt_1.JWTAuth.verify(context.connectionParams.authorization);
+                    if (auth.userId && UserDevice.checkSession(auth.sessionId, auth.userId, { lastIP: "IP", userAgent: context.connectionParams["user-agent"] })) {
+                        if (modelName.toLowerCase() === "user") {
+                            criteria.id = auth.userId;
+                        }
+                        else {
+                            criteria.user = auth.userId;
+                        }
+                    }
+                    else {
+                        throw 'Authorization failed';
+                    }
+                }
+                let query;
+                if (criteria.where === undefined) {
+                    query = { where: criteria };
+                }
+                else {
+                    query = criteria;
+                }
+                let ORMrequest = sails.models[modelname].find(query);
+                let result = await ORMrequest;
+                //worktime filter
+                if (sails.models[modelname].attributes.worktime) {
+                    result = result.filter(record => {
+                        if (!record.worktime)
+                            return true;
+                        try {
+                            return (worktime_1.WorkTimeValidator.isWorkNow({ worktime: record.worktime })).workNow;
+                        }
+                        catch (error) {
+                            sails.log.error("Graphql > helper > error: ", error);
+                        }
+                    });
+                }
+                return result.length;
+            },
+        };
+        modelsResolvers.Query[`${methodName}Count`] = resolverQueryCount;
     }
     // Model fields resolvers
     let resolvers = {};
@@ -434,37 +505,74 @@ function addModelResolver(modelname) {
                 case "model":
                     resolvers[key] = async (parent, args, context) => {
                         criteria[relationKey] = parent[key];
+                        // Check access rights
+                        if (isAuthRequired(modelAttribute[modelRelationType])) {
+                            let auth = await jwt_1.JWTAuth.verify(context.connectionParams.authorization);
+                            if (auth.userId && UserDevice.checkSession(auth.sessionId, auth.userId, { lastIP: "IP", userAgent: context.connectionParams["user-agent"] })) {
+                                if (modelName.toLowerCase() === "user") {
+                                    criteria["id"] = auth.userId;
+                                }
+                                else {
+                                    criteria["user"] = auth.userId;
+                                }
+                            }
+                            else {
+                                throw 'Authorization failed';
+                            }
+                        }
                         let result = await sails.models[modelAttribute[modelRelationType]].findOne(criteria);
                         // TODO: this need only for support legacy patching (discount)
-                        getEmitter_1.default().emit(`http-api:before-send-${modelAttribute.model.toLowerCase()}`, result);
+                        emitter.emit(`http-api:before-send-${modelAttribute.model.toLowerCase()}`, result);
                         // celan if not work time
-                        if (result && result.workTime && !worktime_1.WorkTimeValidator.isWorkNow({ workTime: result.workTime }).workNow) {
+                        if (result && result.worktime && !worktime_1.WorkTimeValidator.isWorkNow({ worktime: result.worktime }).workNow) {
                             result = null;
                         }
+                        return result;
+                    };
+                    // add virtual ids  
+                    resolvers[`${key}Id`] = async (parent, args, context) => {
+                        return parent && parent[key];
                     };
                     return;
                 case "collection":
                     resolvers[key] = async (parent, args, context) => {
-                        let subcriteria = {};
-                        let subquery = { where: criteria };
-                        //sorting
-                        if (sails.models[modelname].attributes.order) {
-                            subquery.sort = 'order ASC';
+                        let parentPrimaryKey = sails.models[modelname].primaryKey;
+                        let criteria = {};
+                        criteria[relationKey] = parent[parentPrimaryKey];
+                        // Check access rights
+                        if (isAuthRequired(modelAttribute[modelRelationType])) {
+                            let auth = await jwt_1.JWTAuth.verify(context.connectionParams.authorization);
+                            if (auth.userId && UserDevice.checkSession(auth.sessionId, auth.userId, { lastIP: "IP", userAgent: context.connectionParams["user-agent"] })) {
+                                if (modelName.toLowerCase() === "user") {
+                                    criteria["id"] = auth.userId;
+                                }
+                                else {
+                                    criteria["user"] = auth.userId;
+                                }
+                            }
+                            else {
+                                throw 'Authorization failed';
+                            }
+                        }
+                        let result = null;
+                        result = (await sails.models[modelname].findOne({ id: parent.id }).populate(key))[key];
+                        if (result && sails.models[modelAttribute[modelRelationType]].attributes.sortOrder) {
+                            result.sort((a, b) => a.sortOrder - b.sortOrder);
                         }
-                        let result = (await sails.models[modelname].findOne({ id: parent.id }).populate(key, subquery));
-                        result = result ? result[key] : null;
+                        if (!result)
+                            result = [];
                         // TODO: this need only for support legacy patching (discount)
                         if (result && result.length) {
                             result.forEach(item => {
-                                getEmitter_1.default().emit(`http-api:before-send-${modelAttribute.collection.toLowerCase()}`, item);
+                                emitter.emit(`http-api:before-send-${modelAttribute.collection.toLowerCase()}`, item);
                             });
                         }
-                        if (sails.models[modelname].attributes.workTime && Array.isArray(result)) {
+                        if (sails.models[modelAttribute[modelRelationType]].attributes.worktime && Array.isArray(result) && result.length > 0) {
                             result = result.filter(record => {
-                                if (!record.workTime)
+                                if (!record.worktime)
                                     return true;
                                 try {
-                                    return (worktime_1.WorkTimeValidator.isWorkNow({ workTime: record.workTime })).workNow;
+                                    return (worktime_1.WorkTimeValidator.isWorkNow({ worktime: record.worktime })).workNow;
                                 }
                                 catch (error) {
                                     sails.log.error("Graphql > helper > error: ", error);
@@ -489,25 +597,25 @@ function addModelResolver(modelname) {
         models.add(modelname);
         const methodName = `${firstLetterToLowerCase(modelName)}`;
         let subscription = {
-            def: `""" Generated """ ${methodName}(criteria: Json): ${modelName}`,
+            def: `""" [autogenerated] ${isAuthRequired(modelname) ? '\n[auth required]' : ''} """ ${methodName}(criteria: Json): ${modelName} `,
             fn: {
-                subscribe: withFilter((rootValue, args, context, info) => context.pubsub.asyncIterator(modelName), async (payload, args, context, info) => {
+                subscribe: (0, apollo_server_1.withFilter)((rootValue, args, context, info) => context.pubsub.asyncIterator(modelName), async (payload, args, context, info) => {
                     // For User models
-                    if (sails.models[modelname].attributes.user) {
-                        if (userAuth) {
-                            let user = await userAuth(context.connectionParams.authorization);
-                            if (user.id === payload.user) {
-                                if (args.criteria) {
-                                    checkCriteria(payload, args.criteria);
-                                }
-                                else {
-                                    return true;
-                                }
+                    if (sails.models[modelname].attributes.user || modelname === 'user') {
+                        let auth = await jwt_1.JWTAuth.verify(context.connectionParams.authorization);
+                        if (!args.criteria) {
+                            args.criteria = {};
+                        }
+                        if (auth.userId) {
+                            if (modelName.toLowerCase() === "user") {
+                                args.criteria.id = auth.userId;
+                            }
+                            else {
+                                args.criteria.user = auth.userId;
                             }
-                            ;
                         }
                         else {
-                            return false;
+                            throw 'Authorization failed';
                         }
                     }
                     return checkCriteria(payload, args.criteria);
@@ -569,12 +677,16 @@ function modelPublishExtend(modelname) {
         publish: async function (id) {
             let data = await sails.models[modelname].findOne(id);
             // `http-api:request-${modelAttribute.collection.toLowerCase()}model-list`,
-            getEmitter_1.default().emit(`http-api:before-send-${modelname.toLowerCase()}`, data);
+            emitter.emit(`http-api:before-send-${modelname.toLowerCase()}`, data);
             sails.graphql.pubsub.publish(modelName, data);
         },
     };
     _.merge(sails.models[modelname], modelPublishExtendObj);
 }
+function isAuthRequired(modelname) {
+    modelname = modelname.toLowerCase();
+    return sails.models[modelname].attributes.user !== undefined || modelname === 'user';
+}
 exports.default = {
     addModel,
     addType,