Etienne
71724de7dd
closes https://github.com/twentyhq/private-issues/issues/351 closes https://github.com/twentyhq/private-issues/issues/350 Before, introspection query works without token. After, fails. ``` query IntrospectionQuery { __schema { queryType { name } mutationType { name } subscriptionType { name } types { ...FullType } directives { name description locations args { ...InputValue } } } } fragment FullType on __Type { kind name description fields(includeDeprecated: true) { name description args { ...InputValue } type { ...TypeRef } isDeprecated deprecationReason } inputFields { ...InputValue } interfaces { ...TypeRef } enumValues(includeDeprecated: true) { name description isDeprecated deprecationReason } possibleTypes { ...TypeRef } } fragment InputValue on __InputValue { name description type { ...TypeRef } defaultValue } fragment TypeRef on __Type { kind name ofType { kind name ofType { kind name ofType { kind name ofType { kind name ofType { kind name ofType { kind name ofType { kind name } } } } } } } } ```
63 lines
2.7 KiB
TypeScript
63 lines
2.7 KiB
TypeScript
import { type YogaDriverConfig } from '@graphql-yoga/nestjs';
|
|
import GraphQLJSON from 'graphql-type-json';
|
|
|
|
import { NodeEnvironment } from 'src/engine/core-modules/twenty-config/interfaces/node-environment.interface';
|
|
|
|
import { useCachedMetadata } from 'src/engine/api/graphql/graphql-config/hooks/use-cached-metadata';
|
|
import { MetadataGraphQLApiModule } from 'src/engine/api/graphql/metadata-graphql-api.module';
|
|
import { type CacheStorageService } from 'src/engine/core-modules/cache-storage/services/cache-storage.service';
|
|
import { type ExceptionHandlerService } from 'src/engine/core-modules/exception-handler/exception-handler.service';
|
|
import { useDisableIntrospectionForUnauthenticatedUsers } from 'src/engine/core-modules/graphql/hooks/use-disable-introspection-for-unauthenticated-users.hook';
|
|
import { useGraphQLErrorHandlerHook } from 'src/engine/core-modules/graphql/hooks/use-graphql-error-handler.hook';
|
|
import { type I18nService } from 'src/engine/core-modules/i18n/i18n.service';
|
|
import { type MetricsService } from 'src/engine/core-modules/metrics/metrics.service';
|
|
import { type TwentyConfigService } from 'src/engine/core-modules/twenty-config/twenty-config.service';
|
|
import { type DataloaderService } from 'src/engine/dataloaders/dataloader.service';
|
|
import { renderApolloPlayground } from 'src/engine/utils/render-apollo-playground.util';
|
|
|
|
export const metadataModuleFactory = async (
|
|
twentyConfigService: TwentyConfigService,
|
|
exceptionHandlerService: ExceptionHandlerService,
|
|
dataloaderService: DataloaderService,
|
|
cacheStorageService: CacheStorageService,
|
|
metricsService: MetricsService,
|
|
i18nService: I18nService,
|
|
): Promise<YogaDriverConfig> => {
|
|
const config: YogaDriverConfig = {
|
|
autoSchemaFile: true,
|
|
include: [MetadataGraphQLApiModule],
|
|
renderGraphiQL() {
|
|
return renderApolloPlayground({ path: 'metadata' });
|
|
},
|
|
resolvers: { JSON: GraphQLJSON },
|
|
plugins: [
|
|
useGraphQLErrorHandlerHook({
|
|
metricsService: metricsService,
|
|
exceptionHandlerService,
|
|
i18nService,
|
|
twentyConfigService,
|
|
}),
|
|
useCachedMetadata({
|
|
cacheGetter: cacheStorageService.get.bind(cacheStorageService),
|
|
cacheSetter: cacheStorageService.set.bind(cacheStorageService),
|
|
operationsToCache: ['ObjectMetadataItems', 'FindAllCoreViews'],
|
|
}),
|
|
useDisableIntrospectionForUnauthenticatedUsers(
|
|
twentyConfigService.get('NODE_ENV') === NodeEnvironment.PRODUCTION,
|
|
),
|
|
],
|
|
path: '/metadata',
|
|
context: () => ({
|
|
loaders: dataloaderService.createLoaders(),
|
|
}),
|
|
};
|
|
|
|
if (twentyConfigService.get('NODE_ENV') === NodeEnvironment.DEVELOPMENT) {
|
|
config.renderGraphiQL = () => {
|
|
return renderApolloPlayground({ path: 'metadata' });
|
|
};
|
|
}
|
|
|
|
return config;
|
|
};
|