Network Interface

[ghost]

For authorization I need to send tokens inside an optional header configuration exposed on the graphql server. Unless I'm blind, or it's meant for the graphql-go package and not this one, I can't see it anywhere.

[leocavalcante]

@omgj, you can use a custom handler to have access for *http.Request so you can get the Authorization header. I'll be using this solution for JWT.

Just did a test case, hope it helps:
https://github.com/leocavalcante/GoGraphQwt/blob/master/main.go

[yookoala]

After #24, you can implement a middleware (something like chi.Middleware or alice.Constructor), parse anything in the http.Request and pass along as context.Context with http.Request.WithContext().

For example,

import (
  "context"
  "net/http"

  "github.com/graphql-go/handler"
)

func main() {
  // define GraphQL schema using relay library helpers
  schema := graphql.NewSchema(...)

  // apply middleware
  h := func(inner http.Handler) http.Handler {
    return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
      // some kind of authentication here
      user := parseJwtUser(r)
      if !user.canDoGraphQL() {
        // do something to tell the user
        // ...
        // ...
        return
      }

      // do normal graphql
      innerCtx := context.WithValue(r.Context(), "user", user)
      inner.ServeHTTP(w, r.WithContext(innerCtx))
    })
  }(handler.New(&handler.Config{
    Schema: &schema,
    Pretty: true,
  }))

  // serve it to port 8080
  http.Handle("/graphql", h)
  http.ListenAndServe(":8080", nil)
}