speckle-server/modules/core/graph/directives/hasRole.js

const { SchemaDirectiveVisitor, ForbiddenError } = require( 'apollo-server-express' )
const { defaultFieldResolver } = require( 'graphql' )
const appRoot = require( 'app-root-path' )
const { validateServerRole } = require( `${appRoot}/modules/shared` )


module.exports = {
  hasRole: class HasRoleDirective extends SchemaDirectiveVisitor {
    visitObject( type ) {
      this.wrapFields( type )
    }

    visitFieldDefinition( field, details ) {
      // this.wrapFields( details.objectType )
      const { resolver = field.resolve || defaultFieldResolver, name } = field
      const requiredRole = this.args.role

      field.resolve = async function ( parent, args, context, info ) {
        await validateServerRole( context, requiredRole )

        const data = await resolver.call( this, parent, args, context, info )
        return data
      }
    }

    wrapFields( objectType ) {
      const fields = objectType.getFields()

      Object.keys( fields ).forEach( fieldName => {
        const field = fields[ fieldName ];
        const { resolver = field.resolve || defaultFieldResolver, name } = field
        const requiredRole = this.args.role

        field.resolve = async function ( parent, args, context, info ) {
          await validateServerRole( context, requiredRole )

          const data = await resolver.call( this, parent, args, context, info )
          return data
        }
      } )
    }
  }
}