82 | Loading
83 | GraphQL Playground
84 |
85 |
82 | 
2 |
3 | $BADGE
4 |
5 | https://learn.begin.com
6 |
7 | ## Deploy your own
8 |
9 | [](https://begin.com/apps/create?template=https://github.com/begin-examples/learn-node-graphql)
10 |
11 | Deploy your own clone of this app to Begin!
12 |
13 | ## Getting started
14 |
15 | - Start the local dev server: `npm start`
16 | - Build the code: `npm run build`
17 | - Lint your code: `npm run lint` (after you've installed a linter, of course)
18 | - Run your tests: `npm t` (don't forget to write some!)
19 |
20 | ## Reference
21 |
22 | - [Quickstart](https://docs.begin.com/en/guides/quickstart/) - basics on working locally, project structure, deploying, and accessing your Begin app
23 | - [Creating new routes](https://docs.begin.com/en/functions/creating-new-functions) - basics on expanding the capabilities of your app
24 |
25 | Head to [docs.begin.com](https://docs.begin.com/) to learn more!
26 |
--------------------------------------------------------------------------------
/src/http/get-login/github.js:
--------------------------------------------------------------------------------
1 | let tiny = require('tiny-json-http')
2 |
3 | module.exports = async function github(req) {
4 |
5 | // trade the code for an access token
6 | let result = await tiny.post({
7 | url: 'https://github.com/login/oauth/access_token',
8 | headers: {Accept: 'application/json'},
9 | data: {
10 | code: req.query.code,
11 | client_id: process.env.GITHUB_CLIENT_ID,
12 | client_secret: process.env.GITHUB_CLIENT_SECRET,
13 | redirect_uri: process.env.GITHUB_REDIRECT,
14 | }
15 | })
16 |
17 | let token = result.body.access_token
18 |
19 | // use the access token to get the user account
20 | let user = await tiny.get({
21 | url: `https://api.github.com/user?access_token=${token}`,
22 | headers: {Accept: 'application/json'},
23 | })
24 |
25 | // create a clean acccount obj
26 | return {
27 | token,
28 | name: user.body.name,
29 | login: user.body.login,
30 | id: user.body.id,
31 | url: user.body.url,
32 | avatar: user.body.avatar_url
33 | }
34 | }
35 |
--------------------------------------------------------------------------------
/src/http/get-login/index.js:
--------------------------------------------------------------------------------
1 | let arc = require('@architect/functions')
2 | let github = require('./github')
3 |
4 | async function login(req) {
5 | if (req.query.code) {
6 | let account = await github(req)
7 | return {
8 | session: {account},
9 | location: '/'
10 | }
11 | }
12 | else {
13 | return {
14 | location: '/?authorized=false'
15 | }
16 | }
17 | }
18 |
19 | exports.handler = arc.http.async(login)
20 |
--------------------------------------------------------------------------------
/src/http/post-graphql/index.js:
--------------------------------------------------------------------------------
1 | let arc = require('@architect/functions')
2 | let query = require('./middleware/query')
3 | let auth = require('./middleware/auth')
4 |
5 | exports.handler = arc.http.async(auth, query)
6 |
--------------------------------------------------------------------------------
/src/http/post-graphql/middleware/auth.js:
--------------------------------------------------------------------------------
1 | // mutations require req.session.account
2 | module.exports = async function auth(req) {
3 |
4 | let client_id = process.env.GITHUB_CLIENT_ID
5 | let redirect_uri = process.env.GITHUB_REDIRECT
6 | let base = `https://github.com/login/oauth/authorize`
7 | let href = `${base}?client_id=${client_id}&redirect_uri=${redirect_uri}`
8 |
9 | if (!req.session.account &&
10 | req.body &&
11 | req.body.query &&
12 | req.body.query.startsWith('mutation')) {
13 | return {
14 | statusCode: 403,
15 | json: {
16 | error: 'not_authorized',
17 | message: 'please sign in',
18 | href
19 | }
20 | }
21 | }
22 | }
23 |
--------------------------------------------------------------------------------
/src/http/post-graphql/middleware/query.js:
--------------------------------------------------------------------------------
1 | let { graphql } = require('graphql')
2 | let { makeExecutableSchema } = require('graphql-tools')
3 |
4 | let fs = require('fs')
5 | let path = require('path')
6 |
7 | // 1. read resolvers
8 | let { account, draft, drafts, save, destroy } = require('../resolvers')
9 |
10 | // 2. read the schema
11 | let typeDefs = fs.readFileSync(path.join(__dirname, '..', 'schema.graphql')).toString()
12 |
13 | // 3. combine resolvers and schema
14 | let schema = makeExecutableSchema({
15 | typeDefs,
16 | resolvers: {
17 | Query: { draft, drafts },
18 | Mutation: { account, save, destroy }
19 | }
20 | })
21 |
22 | /** graphql middleware */
23 | module.exports = async function query(req) {
24 | try {
25 | let result = await graphql(schema, req.body.query, {}, req.session, req.body.variables, req.body.operationName)
26 | return {
27 | json: result
28 | }
29 | }
30 | catch(e) {
31 | return {
32 | json: { error: e.name, message: e.message, stack: e.stack }
33 | }
34 | }
35 | }
36 |
--------------------------------------------------------------------------------
/src/http/post-graphql/resolvers.js:
--------------------------------------------------------------------------------
1 | let data = require('@begin/data')
2 | let xss = require('xss')
3 |
4 | module.exports = {
5 | account,
6 | draft,
7 | drafts,
8 | save,
9 | destroy
10 | }
11 |
12 | async function account(root, args, session) {
13 | if (!session.account)
14 | throw Error('not authorized')
15 | let copy = session.account
16 | delete copy.token
17 | return copy
18 | }
19 |
20 | async function draft(root, args, session) {
21 | return await data.get({
22 | table: 'drafts',
23 | ...args
24 | })
25 | }
26 |
27 | async function drafts(root, args, session) {
28 | return await data.get({
29 | table: 'drafts',
30 | })
31 | }
32 |
33 | async function save(root, draft, session) {
34 | if (!session.account)
35 | throw Error('not authorized')
36 | let required = ['title', 'body']//, 'author', 'avatar']
37 | for (let param of required) {
38 | if (!draft[param])
39 | throw ReferenceError(`missing param ${param}`)
40 | if (draft[param] && draft[param].length < 4)
41 | throw RangeError(`${param} must be four or more characters`)
42 | }
43 | draft.author = session.account.name
44 | draft.avatar = session.account.avatar
45 | draft.title = xss(draft.title)
46 | draft.body = xss(draft.body)
47 | return await data.set({
48 | table: 'drafts',
49 | ...draft
50 | })
51 | }
52 |
53 | async function destroy(root, draft, session) {
54 | if (!session.account)
55 | throw Error('not authorized')
56 | return await data.destroy({
57 | table: 'drafts',
58 | ...draft
59 | })
60 | }
61 |
--------------------------------------------------------------------------------
/src/http/post-graphql/schema.graphql:
--------------------------------------------------------------------------------
1 | type Account {
2 | id: ID!
3 | name: String
4 | avatar: String
5 | login: String
6 | }
7 |
8 | type Draft {
9 | key: ID!
10 | title: String
11 | body: String
12 | }
13 |
14 | type Query {
15 | draft(key: String): Draft
16 | drafts(cursor: String): [Draft]
17 | }
18 |
19 | type Mutation {
20 | account: Account
21 | save(title: String!, body: String!): Draft
22 | destroy(key: String!): Boolean
23 | }
24 |
--------------------------------------------------------------------------------
/src/http/post-logout/index.js:
--------------------------------------------------------------------------------
1 | let arc = require('@architect/functions')
2 |
3 | async function logout(req) {
4 | return {
5 | session: {},
6 | location: '/'
7 | }
8 | }
9 |
10 | exports.handler = arc.http.async(logout)
11 |
--------------------------------------------------------------------------------