120 lines
2.6 KiB
Go
120 lines
2.6 KiB
Go
package serv
|
|
|
|
import (
|
|
"encoding/json"
|
|
"errors"
|
|
"io"
|
|
"io/ioutil"
|
|
"net/http"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/gorilla/websocket"
|
|
)
|
|
|
|
const (
|
|
maxReadBytes = 100000 // 100Kb
|
|
introspectionQuery = "IntrospectionQuery"
|
|
openVar = "{{"
|
|
closeVar = "}}"
|
|
)
|
|
|
|
var (
|
|
upgrader = websocket.Upgrader{}
|
|
errNoUserID = errors.New("no user_id available")
|
|
errUnauthorized = errors.New("not authorized")
|
|
)
|
|
|
|
type gqlReq struct {
|
|
OpName string `json:"operationName"`
|
|
Query string `json:"query"`
|
|
Vars json.RawMessage `json:"variables"`
|
|
ref string
|
|
role string
|
|
hdr http.Header
|
|
}
|
|
|
|
type variables map[string]json.RawMessage
|
|
|
|
type gqlResp struct {
|
|
Error string `json:"message,omitempty"`
|
|
Data json.RawMessage `json:"data,omitempty"`
|
|
Extensions *extensions `json:"extensions,omitempty"`
|
|
}
|
|
|
|
type extensions struct {
|
|
Tracing *trace `json:"tracing,omitempty"`
|
|
}
|
|
|
|
type trace struct {
|
|
Version int `json:"version"`
|
|
StartTime time.Time `json:"startTime"`
|
|
EndTime time.Time `json:"endTime"`
|
|
Duration time.Duration `json:"duration"`
|
|
Execution execution `json:"execution"`
|
|
}
|
|
|
|
type execution struct {
|
|
Resolvers []resolver `json:"resolvers"`
|
|
}
|
|
|
|
type resolver struct {
|
|
Path []string `json:"path"`
|
|
ParentType string `json:"parentType"`
|
|
FieldName string `json:"fieldName"`
|
|
ReturnType string `json:"returnType"`
|
|
StartOffset int `json:"startOffset"`
|
|
Duration time.Duration `json:"duration"`
|
|
}
|
|
|
|
func apiv1Http(w http.ResponseWriter, r *http.Request) {
|
|
ctx := &coreContext{Context: r.Context()}
|
|
|
|
if authFailBlock == authFailBlockAlways && authCheck(ctx) == false {
|
|
err := "Not authorized"
|
|
logger.Debug().Msg(err)
|
|
http.Error(w, err, 401)
|
|
return
|
|
}
|
|
|
|
b, err := ioutil.ReadAll(io.LimitReader(r.Body, maxReadBytes))
|
|
defer r.Body.Close()
|
|
|
|
if err != nil {
|
|
logger.Err(err).Msg("failed to read request body")
|
|
errorResp(w, err)
|
|
return
|
|
}
|
|
|
|
err = json.Unmarshal(b, &ctx.req)
|
|
|
|
if err != nil {
|
|
logger.Err(err).Msg("failed to decode json request body")
|
|
errorResp(w, err)
|
|
return
|
|
}
|
|
|
|
if strings.EqualFold(ctx.req.OpName, introspectionQuery) {
|
|
introspect(w)
|
|
return
|
|
}
|
|
|
|
err = ctx.handleReq(w, r)
|
|
|
|
if err == errUnauthorized {
|
|
w.WriteHeader(http.StatusUnauthorized)
|
|
json.NewEncoder(w).Encode(gqlResp{Error: err.Error()})
|
|
return
|
|
}
|
|
|
|
if err != nil {
|
|
logger.Err(err).Msg("failed to handle request")
|
|
errorResp(w, err)
|
|
}
|
|
}
|
|
|
|
func errorResp(w http.ResponseWriter, err error) {
|
|
w.WriteHeader(http.StatusBadRequest)
|
|
json.NewEncoder(w).Encode(gqlResp{Error: err.Error()})
|
|
}
|