Dimitrie Stefanescu
48 lines
1.6 KiB
JavaScript
48 lines
1.6 KiB
JavaScript
'use strict'
|
|
const root = require( 'app-root-path' )
|
|
const { AuthenticationError, UserInputError } = require( 'apollo-server-express' )
|
|
const { createUser, getUser, updateUser, deleteUser, validatePasssword, createToken, revokeToken, revokeTokenById, validateToken, getUserTokens } = require( '../../users/services' )
|
|
const { validateScopes, authorizeResolver } = require( `${root}/modules/shared` )
|
|
|
|
module.exports = {
|
|
Query: {
|
|
async user( parent, args, context, info ) {
|
|
|
|
if ( !context.auth ) throw new AuthenticationError( )
|
|
await validateScopes( context.scopes, 'users:read' )
|
|
|
|
if ( !args.id && !context.userId ) {
|
|
throw new UserInputError( 'You must provide an user id.' )
|
|
}
|
|
|
|
return await getUser( args.id || context.userId )
|
|
}
|
|
},
|
|
User: {
|
|
async email( parent, args, context, info ) {
|
|
// if it's me, go ahead
|
|
if ( context.userId === parent.id )
|
|
return parent.email
|
|
|
|
// otherwise check scopes
|
|
try {
|
|
await validateScopes( context.scopes, 'users:email' )
|
|
return parent.email
|
|
} catch ( err ) {
|
|
return null
|
|
}
|
|
}
|
|
},
|
|
Mutation: {
|
|
// NOTE: this mutation will not exist, or will be enabled only if local user creation is enabled
|
|
async userCreate( parent, args, context, info ) {
|
|
let userId = await createUser( args.user )
|
|
let token = await createToken( userId, "Default Token", [ 'streams:read', 'streams:write' ] )
|
|
return token
|
|
},
|
|
async userEdit( parent, args, context, info ) {
|
|
await updateUser( context.userId, args.user )
|
|
return true
|
|
},
|
|
}
|
|
} |