Null Pointer Micromanagement

    graphql-auth
    TypeScript icon, indicating that this package has built-in type declarations

    1.0.0 • Public • Published

    GraphQL Auth

    🔒 Authentication and authorization middleware for GraphQL.

    graphql-auth is a very simple middleware that easily integrates with any GraphQL server that follows the GraphQL API for resolvers.

    Getting Started

    How It Works

    graphql-auth exports a single function (middleware) withAuth. This function takes two parameters, the first is scope (if any) for authorization, and the second is the callback to call when auth checking is complete. Let's look at an example:

    import withAuth from 'graphql-auth';
     
    const resolvers = {
      Query: {
        users: withAuth(['users:view'], (root, args, context) => { ... }),
        ...
      }
    }

    The way this works is withAuth looks for a special auth property on the context of the resolver. It expects the auth property to have two properties of its own:

    1. isAuthenticated to tell if the user is logged in
    2. scope scope of the logged in user (optional)

    This allows you to use any form of authentication already supported by common frameworks like express and hapi. Here is an example in Hapi.js:

    import { graphqlHapi } from 'graphql-server-hapi';
    import { makeExecutableSchema } from 'graphql-tools';
     
    import typeDefs from './type-defs';
    import resolvers from './resolvers';
     
    const register = function(server, options, next) {
      const executableSchema = makeExecutableSchema({
        resolvers,
        typeDefs,
      });
     
      server.register(
        [
          {
            register: graphqlHapi,
            options: {
              path: '/graphql',
              graphqlOptions: request => ({
                pretty: true,
                schema: executableSchema,
                context: {
                  auth: {
                    isAuthenticated: request.auth.isAuthenticated,
                    scope: request.auth.credentials
                      ? request.auth.credentials.scope
                      : null,
                  },
                },
              }),
            },
          },
        ],
        error => {
          if (error) return next(error);
          next();
        }
      );
    };
     
    register.attributes = {
      name: 'graphql-api',
      version: '1.0.0',
    };
     
    export default register;

    For more in depth examples take a look at the graphql-auth-examples repo.

    Installation

    yarn add graphql-auth

    withAuth([scope,] callback)

    Without scope:

    import withAuth from 'graphql-auth';
     
    const resolvers = {
      Query: {
        users: withAuth((root, args, context, info) => { ... }),
        ...
      }
    }

    With scope:

    import withAuth from 'graphql-auth';
     
    const resolvers = {
      Query: {
        users: withAuth(['users:view'], (root, args, context, info) => { ... }),
        ...
      }
    }

    With dynamic scope:

    import withAuth from 'graphql-auth';
     
    const resolvers = {
      Query: {
        users: withAuth(
          (root, args, context, info) => { /* return scope based on resolver args */ },
          (root, args, context, info) => { ... }),
        ...
      }
    }

    Contributors

    Thanks goes to these wonderful people (emoji key):


    artgibson

    💻

    HaNdTriX

    💻 📖

    Pascal Birchler

    💻

    Andréas Hanss

    💻 📖

    This project follows the all-contributors specification. Contributions of any kind welcome!

    Keywords

    none

    Install

    npm i graphql-auth

    DownloadsWeekly Downloads

    412

    Version

    1.0.0

    License

    MIT

    Unpacked Size

    25 kB

    Total Files

    12

    Last publish

    Collaborators

    • kkemple