izzy lyseggen
24 lines
1018 B
JavaScript
24 lines
1018 B
JavaScript
const { ForbiddenError, SchemaDirectiveVisitor } = require( 'apollo-server-express' )
|
|
const { defaultFieldResolver } = require( 'graphql' )
|
|
|
|
module.exports = {
|
|
hasScope: class HasScopeDirective extends SchemaDirectiveVisitor {
|
|
visitFieldDefinition( field ) {
|
|
const { resolver = field.resolve || defaultFieldResolver, name } = field
|
|
const requiredScope = this.args.scope
|
|
|
|
field.resolve = async function ( parent, args, context, info ) {
|
|
const currentScopes = context.scopes
|
|
// taken from validateScopes
|
|
if ( !currentScopes )
|
|
throw new ForbiddenError( `sorry, you need scope '${requiredScope}' but you don't have any scopes.` )
|
|
if ( currentScopes.indexOf( requiredScope ) === -1 && currentScopes.indexOf( '*' ) === -1 )
|
|
throw new ForbiddenError( `sorry, you need scope '${requiredScope}' but you have '${currentScopes}'` )
|
|
|
|
const data = await resolver.call( this, parent, args, context, info )
|
|
return data
|
|
}
|
|
}
|
|
}
|
|
}
|