buro26-strapi-graphql 0.0.26 → 0.1.0

package/dist/server/index.d.ts

@@ -1,5 +1,6 @@
 import type { GraphQLExtension } from './types';
-import type { Middleware, ResolveContext } from './utils';
+import type { ResolveContext } from './utils';
+import type { Middleware } from './nexus';
 import type { GraphQLResolveInfo } from 'graphql';
 import type { GraphQLFieldConfig } from 'graphql/type';
 declare const _default: {
@@ -39,6 +40,7 @@ declare const _default: {
 export default _default;
 export * from './types';
 export * from './utils';
+export * from './nexus';
 declare module '@strapi/strapi' {
     interface Strapi {
         createGraphQLExtension: (factory: (strapi: Strapi) => GraphQLExtension) => GraphQLExtension;
@@ -59,14 +61,18 @@ declare module 'nexus/dist/core' {
     interface NexusOutputFieldConfig<TypeName extends string, FieldName extends string> {
         extensions?: {
             middlewares?: Middleware[];
+            /**
+             * A function that determines if the current user is authorized to access this field.
+             *
+             * @param parent The parent object.
+             * @param args The arguments passed to the field.
+             * @param context The context object.
+             * @param info The GraphQLResolveInfo object.
+             */
+            authorize?: <Parent extends Object, Args extends Object, Context = ResolveContext>(parent: Parent, args: Args, context: Context, info: GraphQLResolveInfo) => boolean | Promise<boolean>;
         } & GraphQLFieldConfig<any, any>['extensions'];
         /**
-         * A function that determines if the current user is authorized to access this field.
-         *
-         * @param parent The parent object.
-         * @param args The arguments passed to the field.
-         * @param context The context object.
-         * @param info The GraphQLResolveInfo object.
+         * @deprecated Use `authorize` in the extensions config instead.
          */
         authorize?: <Parent extends Object, Args extends Object, Context = ResolveContext>(parent: Parent, args: Args, context: Context, info: GraphQLResolveInfo) => boolean | Promise<boolean>;
     }

package/dist/server/index.js

@@ -41,3 +41,4 @@ exports.default = {
 };
 __exportStar(require("./types"), exports);
 __exportStar(require("./utils"), exports);
+__exportStar(require("./nexus"), exports);

package/dist/server/nexus/index.d.ts

@@ -0,0 +1 @@
+export * from './plugins';

package/dist/server/nexus/index.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./plugins"), exports);

package/dist/server/nexus/plugins/field-authorize.plugin.d.ts

@@ -0,0 +1,15 @@
+import { ArgsValue, GetGen, MaybePromise, SourceValue } from 'nexus/dist/typegenTypeHelpers';
+import type { GraphQLResolveInfo } from 'graphql';
+export type FieldAuthorizeResolver<TypeName extends string, FieldName extends string> = (root: SourceValue<TypeName>, args: ArgsValue<TypeName, FieldName>, context: GetGen<'context'>, info: GraphQLResolveInfo) => MaybePromise<boolean | Error>;
+export interface FieldAuthorizePluginErrorConfig {
+    error: Error;
+    root: any;
+    args: any;
+    ctx: GetGen<'context'>;
+    info: GraphQLResolveInfo;
+}
+export interface FieldAuthorizePluginConfig {
+    formatError?: (authConfig: FieldAuthorizePluginErrorConfig) => Error;
+}
+export declare const defaultFormatError: ({ error, root, args, ctx, info }: FieldAuthorizePluginErrorConfig) => Error;
+export declare const nexusFieldAuthorizePlugin: (authConfig?: FieldAuthorizePluginConfig) => import("nexus/dist/plugin").NexusPlugin;

package/dist/server/nexus/plugins/field-authorize.plugin.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nexusFieldAuthorizePlugin = exports.defaultFormatError = void 0;
+const nexus_1 = require("nexus");
+const utils_1 = require("nexus/dist/utils");
+const utils_2 = require("@strapi/utils");
+const fieldDefTypes = (0, utils_1.printedGenTyping)({
+    optional: true,
+    name: 'authorize',
+    description: `
+    Authorization for an individual field. Returning "true"
+    or "Promise<true>" means the field can be accessed.
+    Returning "false" or "Promise<false>" will respond
+    with a "Not Authorized" error for the field.
+    Returning or throwing an error will also prevent the
+    resolver from executing.
+  `,
+    type: 'FieldAuthorizeResolver<TypeName, FieldName>',
+});
+const defaultFormatError = ({ error, root, args, ctx, info }) => {
+    var _a, _b;
+    // Add rich tracing info
+    const trace = {
+        type: info.parentType.name,
+        field: info.fieldName,
+        user: (_b = (_a = ctx === null || ctx === void 0 ? void 0 : ctx.state) === null || _a === void 0 ? void 0 : _a.user) === null || _b === void 0 ? void 0 : _b.id,
+        args,
+        timestamp: new Date().toISOString(),
+        originalError: error
+    };
+    // Use Strapi's ForbiddenError and attach trace info
+    return new utils_2.errors.ForbiddenError((error === null || error === void 0 ? void 0 : error.message) || 'Not authorized', { trace });
+};
+exports.defaultFormatError = defaultFormatError;
+const nexusFieldAuthorizePlugin = (authConfig = {}) => {
+    const { formatError = exports.defaultFormatError } = authConfig;
+    const ensureError = (root, args, ctx, info) => (error) => {
+        const finalErr = formatError({ error, root, args, ctx, info });
+        if (finalErr instanceof Error) {
+            throw finalErr;
+        }
+        console.error(`Non-Error value ${finalErr} returned from custom formatError in authorize plugin`);
+        throw new utils_2.errors.ForbiddenError('Not authorized');
+    };
+    return (0, nexus_1.plugin)({
+        name: 'CustomFieldAuthorize',
+        description: 'Custom field-level authorization for Strapi GraphQL, with tracing.',
+        fieldDefTypes: fieldDefTypes,
+        onCreateFieldResolver(config) {
+            var _a;
+            // @ts-ignore
+            const authorize = (_a = config.fieldConfig.extensions) === null || _a === void 0 ? void 0 : _a.authorize;
+            if (authorize == null) {
+                return;
+            }
+            if (typeof authorize !== 'function') {
+                console.error(new Error(`The authorize property provided to ${config.fieldConfig.name} with type ${config.fieldConfig.type} should be a function, saw ${typeof authorize}`));
+                return;
+            }
+            return function (root, args, ctx, info, next) {
+                console.log(`Running authorize for ${info.parentType.name}.${info.fieldName}`);
+                let toComplete;
+                try {
+                    toComplete = authorize(root, args, ctx, info);
+                }
+                catch (e) {
+                    toComplete = Promise.reject(e);
+                }
+                return nexus_1.plugin.completeValue(toComplete, (authResult) => {
+                    if (authResult === true) {
+                        return next(root, args, ctx, info);
+                    }
+                    const finalFormatError = ensureError(root, args, ctx, info);
+                    if (authResult instanceof Error) {
+                        finalFormatError(authResult);
+                    }
+                    if (authResult === false) {
+                        finalFormatError(new utils_2.errors.ForbiddenError('Not authorized'));
+                    }
+                    const { fieldName, parentType: { name: parentTypeName } } = info;
+                    finalFormatError(new utils_2.errors.ForbiddenError(`Authorize for ${parentTypeName}.${fieldName} Expected a boolean or Error, saw ${authResult}`));
+                }, (err) => {
+                    ensureError(root, args, ctx, info)(err);
+                });
+            };
+        }
+    });
+};
+exports.nexusFieldAuthorizePlugin = nexusFieldAuthorizePlugin;

package/dist/server/nexus/plugins/index.d.ts

@@ -0,0 +1,2 @@
+export * from './field-authorize.plugin';
+export * from './middleware.plugin';

package/dist/server/nexus/plugins/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./field-authorize.plugin"), exports);
+__exportStar(require("./middleware.plugin"), exports);

package/dist/server/nexus/plugins/middleware.plugin.d.ts

@@ -0,0 +1,17 @@
+import type { GraphQLResolveInfo } from 'graphql';
+import type { ResolverFunction } from '../../types';
+import type { ResolveContext } from '../../utils';
+/**
+ * The Resolver type represents a GraphQL resolver function.
+ */
+export type Resolver = <Parent extends any, Args extends any, Context = ResolveContext>(parent: Parent, args: Args, context: Context, info: GraphQLResolveInfo) => any | Promise<any>;
+/**
+ * Middleware is a function that takes a resolver and returns a new resolver.
+ */
+export type Middleware<TParent = any, TArgs = any> = (resolver: ResolverFunction<TParent, TArgs>) => ResolverFunction<TParent, TArgs>;
+export declare const nexusMiddlewarePlugin: () => import("nexus/dist/plugin").NexusPlugin;
+/**
+ * Logging Middleware
+ * Logs the execution of the resolver.
+ */
+export declare const loggingMiddleware: Middleware;

package/dist/server/{utils/middleware.js → nexus/plugins/middleware.plugin.js}

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.loggingMiddleware = exports.nexusMiddlewarePlugin = void 0;
-require("nexus");
 const nexus_1 = require("nexus");
 const utils_1 = require("nexus/dist/utils");
 const fieldDefTypes = (0, utils_1.printedGenTyping)({
@@ -15,7 +14,7 @@ const fieldDefTypes = (0, utils_1.printedGenTyping)({
     Returning or throwing an error will also prevent the
     resolver from executing.
   `,
-    type: 'any',
+    type: 'any'
 });
 const nexusMiddlewarePlugin = () => (0, nexus_1.plugin)({
     name: 'NexusMiddlewarePlugin',
@@ -59,7 +58,7 @@ const nexusMiddlewarePlugin = () => (0, nexus_1.plugin)({
             };
             return dispatch(0);
         };
-    },
+    }
 });
 exports.nexusMiddlewarePlugin = nexusMiddlewarePlugin;
 /**

package/dist/server/register.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const nexus_1 = require("nexus");
-const utils_1 = require("./utils");
+const nexus_1 = require("./nexus");
 exports.default = async ({ strapi }) => {
     const fileService = strapi
         .plugin('burotwosix-graphql-plugin')
@@ -14,8 +13,8 @@ exports.default = async ({ strapi }) => {
     ];
     graphQlExtensionService.use(() => ({
         plugins: [
-            (0, nexus_1.fieldAuthorizePlugin)(),
-            (0, utils_1.nexusMiddlewarePlugin)(),
+            (0, nexus_1.nexusFieldAuthorizePlugin)(),
+            (0, nexus_1.nexusMiddlewarePlugin)()
         ]
     }));
     for (const extension of extensions) {
@@ -26,14 +25,14 @@ exports.default = async ({ strapi }) => {
                 typeDefs: (_b = (_a = extension === null || extension === void 0 ? void 0 : extension.typeDefs) === null || _a === void 0 ? void 0 : _a.call(extension)) !== null && _b !== void 0 ? _b : '',
                 types: [
                     ...((_d = (_c = extension === null || extension === void 0 ? void 0 : extension.getTypes) === null || _c === void 0 ? void 0 : _c.call(extension)) !== null && _d !== void 0 ? _d : []),
-                    ...((_f = (_e = extension === null || extension === void 0 ? void 0 : extension.types) === null || _e === void 0 ? void 0 : _e.call(extension)) !== null && _f !== void 0 ? _f : []),
+                    ...((_f = (_e = extension === null || extension === void 0 ? void 0 : extension.types) === null || _e === void 0 ? void 0 : _e.call(extension)) !== null && _f !== void 0 ? _f : [])
                 ],
                 plugins: (_h = (_g = extension === null || extension === void 0 ? void 0 : extension.plugins) === null || _g === void 0 ? void 0 : _g.call(extension)) !== null && _h !== void 0 ? _h : [],
                 resolvers: (_k = (_j = extension === null || extension === void 0 ? void 0 : extension.resolvers) === null || _j === void 0 ? void 0 : _j.call(extension)) !== null && _k !== void 0 ? _k : { Query: {}, Mutation: {} },
                 resolversConfig: {
                     ...(_m = (_l = extension === null || extension === void 0 ? void 0 : extension.getResolverConfig) === null || _l === void 0 ? void 0 : _l.call(extension)) !== null && _m !== void 0 ? _m : {},
-                    ...(_p = (_o = extension === null || extension === void 0 ? void 0 : extension.resolversConfig) === null || _o === void 0 ? void 0 : _o.call(extension)) !== null && _p !== void 0 ? _p : {},
-                },
+                    ...(_p = (_o = extension === null || extension === void 0 ? void 0 : extension.resolversConfig) === null || _o === void 0 ? void 0 : _o.call(extension)) !== null && _p !== void 0 ? _p : {}
+                }
             });
         });
     }

package/dist/server/services/file-service.js

@@ -59,7 +59,13 @@ exports.default = ({ strapi }) => ({
             if (extension && typeof extension.build === 'function') {
                 extension = extension.build();
             }
-            collectedExtensions.push(extension);
+            // If it's an array, flatten and push all
+            if (Array.isArray(extension)) {
+                collectedExtensions.push(...extension.map(ext => ext.build ? ext.build() : ext));
+            }
+            else if (extension) {
+                collectedExtensions.push(extension);
+            }
         });
         // Wait for all the promises to resolve
         await Promise.all(filePromises);

package/dist/server/types.d.ts

@@ -53,14 +53,14 @@ export interface GraphQLExtension {
      */
     resolversConfig?: () => Record<string, ResolverConfigOption>;
 }
-export type ResolverConfigOption = {
+export type ResolverConfigOption<TParent = any, TArgs = any, TOutput = any> = {
     auth?: boolean | undefined;
-    policies?: (string | PolicyFunction)[];
-    middlewares?: MiddlewareFunction[];
+    policies?: (string | PolicyFunction<TParent, TArgs>)[];
+    middlewares?: MiddlewareFunction<TParent, TArgs, TOutput>[];
 };
-export type PolicyFunctionContext = {
-    parent: any;
-    args: any;
+export type PolicyFunctionContext<TParent = any, TArgs = any> = {
+    parent: TParent;
+    args: TArgs;
     context: ResolveContext;
     info: GraphQLResolveInfo;
     state: ResolveContext['state'];
@@ -69,7 +69,7 @@ export type PolicyFunctionContext = {
 export type PolicyFunctionOptions = {
     strapi: Strapi;
 };
-export type PolicyFunction = (context: PolicyFunctionContext, config: any, opts: PolicyFunctionOptions) => boolean | Promise<boolean>;
-export type MiddlewareFunction = (next: MiddlewareNextFunction, parent: any, args: any, context: ResolveContext, info: GraphQLResolveInfo) => any | Promise<any>;
-export type MiddlewareNextFunction = (parent: any, args: any, context: ResolveContext, info: GraphQLResolveInfo) => Promise<any>;
-export type ResolverFunction = (parent: any, args: any, context: ResolveContext, info: GraphQLResolveInfo) => any | Promise<any>;
+export type PolicyFunction<TParent = any, TArgs = any> = (context: PolicyFunctionContext<TParent, TArgs>, config: any, opts: PolicyFunctionOptions) => boolean | Promise<boolean>;
+export type MiddlewareFunction<TParent = any, TArgs = any, TOutput = any> = (next: MiddlewareNextFunction<TParent, TArgs, TOutput>, parent: TParent, args: TArgs, context: ResolveContext, info: GraphQLResolveInfo) => TOutput | Promise<TOutput>;
+export type MiddlewareNextFunction<TParent = any, TArgs = any, TOutput = any> = (parent: TParent, args: TArgs, context: ResolveContext, info: GraphQLResolveInfo) => Promise<TOutput>;
+export type ResolverFunction<TParent = any, TArgs = any, TOutput = any> = (parent: TParent, args: TArgs, context: ResolveContext, info: GraphQLResolveInfo) => TOutput | Promise<TOutput>;

package/dist/server/utils/field-builder/builder.d.ts

@@ -0,0 +1,24 @@
+import type { FieldExtensionBuilder, FieldExtensionOptions, GraphQLFieldHook } from './types';
+import type { ResolverFunction } from '../../types';
+import type { Middleware } from '../../nexus';
+/**
+ * Internal state for the builder.
+ */
+type BuilderState<Type = any, TArgs = any, TOutput = any> = {
+    options: FieldExtensionOptions<Type, TArgs, TOutput>;
+    initFunctions: Array<() => void>;
+    typeFunctions: Array<() => unknown[]>;
+    middlewareFunctions: Middleware[];
+    authorizeFunctions: ResolverFunction<Partial<Type> | null, TArgs, boolean>[];
+    hooks: GraphQLFieldHook[];
+    built: boolean;
+};
+/**
+ * Creates a fluent, deeply immutable builder to extend a root field in the GraphQL schema.
+ * Each method returns a new builder instance with its own state.
+ *
+ * @param rootType - Either 'Query' or 'Mutation' or any other Type to extend.
+ * @param _state
+ */
+export declare const createGraphQLFieldBuilder: <Type = any, TArgs = any, TOutput = Type>(rootType?: string, _state?: BuilderState<Type, TArgs, TOutput>) => FieldExtensionBuilder<Type, TArgs, TOutput>;
+export {};