How to use Express Middleware for Authentication/Authorization. about graffiti-mongoose

[cellis]

Upon closer inspection, i have figured this out. However the README should be updated as the request parameter is undefined, while the root parameter actually contains the request.

const schema = getSchema([User], { hooks: {
    singular: {
        pre: (next, root, args, request)=> {
            console.log(root.request.user);  // => { email: '[email protected]' }
            console.log(request);            // => undefined
            next();
        },
        post: (next, value)=> {
            //...
            next();
        }
    }
}});

Perhaps the shifted signature of [email protected] has something to do with it. Here's the signature at 0.6.2:

graphql(schema, requestString, rootValue, contextValue, variableValues, operationName) {

And here's what graffiti passes:

return graphql(schema, query, { request }, context, parsedVariables)...

at L41

[katopz]

@cellis for mutation is even more weird
doc

  mutation: {
    pre: (next, args, context) => next(),
    post: (next, value, args, context) => next()
  }

actually

  mutation: {
    pre: (next, args, context, what) => {
      console.log(what.rootValue.request.user);
      next();
    },
    post: (next, value, args, context) => {
      next();
    }
  }

And context is empty {}

[katopz]

@tothandras I'm not sure PR for read me is enough, something really wrong there
Here's workaround for me atm

const hooks = {
  viewer: {
    pre: (next, args, foo, context, options) => {
      console.log(options.rootValue.request.user);
      next()
    },
    post: (next, value) => {
      next()
    }
  },
  singular: {
    pre: (next, root, args, request, options) => {
      console.log(options.rootValue.request.user);
      next();
    },
    post: (next, value, args, context) => {
      next();
    }
  },
  plural: {
    pre: (next, root, args, request, options) => {
      console.log(options.rootValue.request.user);
      next();
    },
    post: (next, value, args, context) => {
      next();
    }
  },
  mutation: {
    pre: (next, args, context, options) => {
      console.log(options.rootValue.request.user);
      next();
    },
    post: (next, value, args, context) => {
      next();
    }
  }
}

module.exports = hooks

Somehow nested viewer change an order of arguments, and here's a problem

  plural: {
    pre: (next, root, args, request, options) => {

      // Normal plural query will return `root.request.user` properly
      // But mutation with viewer plural will return `{_type: "Viewer", id: "viewer"}` 
      // and `root.request` will be `undefined`
      console.log(root.request.user);

      // Working both query, mutation
      console.log(options.rootValue.request.user);

      next();
    }

Took me a day to figure this out 🤕

[tothandras]

Thanks for finding this! PR's are welcomed if you have time to fix it @cellis, @katopz!