Packages update (#423)

* use nodejs 12

* fix docker image

* Bump version up to 1.0.21

* use nodejs 14

* use nodejs 16

* update some packages

* update typescript version

* update packages and rewrite one directive

* rewrite default value directive

* rewrite validate directive

* rewrite upload image directive

* refactor all directives

* fix upload

* Bump version up to 1.0.22

* remove unnecessary stuff

Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>

Author: nikmel2803

.github/config.yml

@@ -1,6 +1,6 @@
 {
   "name": "hawk.api",
-  "version": "1.0.21",
+  "version": "1.0.22",
   "main": "index.ts",
   "license": "UNLICENSED",
   "scripts": {
@@ -24,47 +24,49 @@
     "jest": "^26.2.2",
     "nodemon": "^2.0.2",
     "ts-jest": "^26.1.4",
-    "ts-node": "^8.6.2",
-    "typescript": "^3.7.5"
+    "ts-node": "^10.9.1",
+    "typescript": "^4.7.4"
   },
   "dependencies": {
     "@amplitude/node": "^1.10.0",
+    "@graphql-tools/merge": "^8.3.1",
+    "@graphql-tools/schema": "^8.5.1",
+    "@graphql-tools/utils": "^8.9.0",
     "@hawk.so/nodejs": "^3.1.1",
     "@hawk.so/types": "^0.1.18",
     "@types/amqp-connection-manager": "^2.0.4",
     "@types/bson": "^4.0.5",
     "@types/debug": "^4.1.5",
     "@types/escape-html": "^1.0.0",
+    "@types/graphql-upload": "^8.0.11",
     "@types/jsonwebtoken": "^8.3.5",
     "@types/mime-types": "^2.1.0",
     "@types/mongodb": "^3.6.20",
-    "@types/node": "^14.0.13",
+    "@types/node": "^16.11.46",
     "@types/node-fetch": "^2.5.4",
-    "@types/uuid": "^3.4.6",
+    "@types/uuid": "^8.3.4",
     "amqp-connection-manager": "^3.1.0",
     "amqplib": "^0.5.5",
-    "apollo-server-express": "^2.14.2",
-    "argon2": "^0.26.2",
+    "apollo-server-express": "^3.10.0",
+    "argon2": "^0.28.7",
     "aws-sdk": "^2.1174.0",
-    "axios": "^0.21.2",
+    "axios": "^0.27.2",
     "body-parser": "^1.19.0",
     "bson": "^4.6.5",
     "dataloader": "^2.0.0",
-    "dotenv": "^8.2.0",
+    "dotenv": "^16.0.1",
     "escape-html": "^1.0.3",
     "express": "^4.17.1",
-    "graphql": "^14.5.8",
-    "graphql-iso-date": "^3.6.1",
-    "graphql-list-fields": "^2.0.2",
-    "graphql-scalars": "^1.2.7",
+    "graphql": "^16.5.0",
+    "graphql-scalars": "^1.17.0",
     "graphql-type-json": "^0.3.0",
-    "graphql-upload": "^9.0.0",
+    "graphql-upload": "^13",
     "jsonwebtoken": "^8.5.1",
     "lodash": "^4.17.15",
     "migrate-mongo": "^7.0.1",
     "mime-types": "^2.1.25",
     "mongodb": "^3.7.3",
-    "ts-node-dev": "^1.0.0-pre.44",
-    "uuid": "^3.3.3"
+    "ts-node-dev": "^2.0.0",
+    "uuid": "^8.3.2"
   }
 }

package.json

@@ -1,36 +1,45 @@
-import { UnknownGraphQLField, UnknownGraphQLResolverResult } from '../types/graphql';
-import {
-  SchemaDirectiveVisitor
-} from 'apollo-server-express';
-import { defaultFieldResolver } from 'graphql';
+import {defaultFieldResolver, GraphQLSchema} from "graphql";
+import {mapSchema, MapperKind, getDirective} from '@graphql-tools/utils'
+import {UnknownGraphQLResolverResult} from "../types/graphql";
 
-/**
- * Directive for setting field default value
- */
-export default class DefaultValueDirective extends SchemaDirectiveVisitor {
-  /**
-   * Method to be called on field visit
-   * @param field {UnknownGraphQLField} - GraphQL field definition
-   */
-  public visitFieldDefinition(field: UnknownGraphQLField): void {
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    let value: any;
+export default function defaultValueDirective(directiveName = 'default') {
+  return {
+    defaultValueDirectiveTypeDefs:`
+    """
+    Directive for setting field default value
+    """
+    directive @${directiveName}(
+      "Default field value encoded in JSON"
+      value: String!
+    ) on FIELD_DEFINITION
+    `,
+    defaultValueDirectiveTransformer: (schema: GraphQLSchema) =>
+      mapSchema(schema, {
+        [MapperKind.OBJECT_FIELD]: (fieldConfig, fieldName) => {
+          const defaultValueDirective = getDirective(schema, fieldConfig, directiveName)?.[0];
 
-    try {
-      value = JSON.parse(this.args.value);
-    } catch (_) {
-      console.warn('Value for @default directive should be JSON string.');
-    }
-    const { resolve = defaultFieldResolver } = field;
+          if (defaultValueDirective) {
+            let { value } = defaultValueDirective as {value: string};
+            try {
+              value = JSON.parse(value);
+            } catch (_) {
+              console.warn('Value for @default directive should be JSON string.');
+            }
 
-    field.resolve = async (object, args, context, info): UnknownGraphQLResolverResult => {
-      let result = await resolve.call(this, object, args, context, info);
+            const { resolve = defaultFieldResolver } = fieldConfig;
 
-      if (value && !result) {
-        result = value;
-      }
+            fieldConfig.resolve = async (object, args, context, info): UnknownGraphQLResolverResult => {
+              let result = await resolve(object, args, context, info);
 
-      return result;
-    };
+              if (value && !result) {
+                result = value;
+              }
+
+              return result;
+            };
+          }
+          return fieldConfig;
+        }
+      })
   }
-};
+}

src/directives/defaultValue.ts

@@ -0,0 +1,34 @@
+import {defaultFieldResolver, GraphQLSchema} from "graphql";
+import {mapSchema, MapperKind, getDirective} from '@graphql-tools/utils'
+
+export default function renameFromDirective(directiveName = 'renameFrom') {
+  return {
+    renameFromDirectiveTypeDefs:`
+    """
+    Directive for field renaming
+    """
+    directive @${directiveName}(
+      "Parent's field name"
+      name: String!
+    ) on FIELD_DEFINITION
+    `,
+    renameFromDirectiveTransformer: (schema: GraphQLSchema) =>
+      mapSchema(schema, {
+        [MapperKind.OBJECT_FIELD]: (fieldConfig, fieldName) => {
+          const renameFromDirective = getDirective(schema, fieldConfig, directiveName)?.[0];
+
+          if (renameFromDirective) {
+            const { name } = renameFromDirective as {name: string};
+
+            const { resolve = defaultFieldResolver } = fieldConfig;
+            fieldConfig.resolve = (parent, args, context, info) => {
+              parent[fieldName] = parent[name];
+
+              return resolve(parent, args, context, info);
+            }
+          }
+          return fieldConfig;
+        }
+      })
+  }
+}

src/directives/renameFrom.js

@@ -0,0 +1,94 @@
+import {defaultFieldResolver, GraphQLSchema} from "graphql";
+import {mapSchema, MapperKind, getDirective} from '@graphql-tools/utils'
+import {ResolverContextWithUser, UnknownGraphQLResolverResult} from "../types/graphql";
+import {ForbiddenError, UserInputError} from "apollo-server-express";
+import WorkspaceModel from "../models/workspace";
+
+/**
+ * Check is user admin via workspace id
+ * @param context - resolver context
+ * @param workspaceId - workspace id to check
+ */
+async function checkByWorkspaceId(context: ResolverContextWithUser, workspaceId: string): Promise<void> {
+  const workspace = await context.factories.workspacesFactory.findById(workspaceId);
+
+  if (!workspace) {
+    throw new UserInputError('There is no workspace with that id');
+  }
+
+  const member = await workspace.getMemberInfo(context.user.id);
+
+  if (!member || WorkspaceModel.isPendingMember(member)) {
+    throw new ForbiddenError('You are not a member of this workspace');
+  }
+
+  if (!member.isAdmin) {
+    throw new ForbiddenError('Not enough permissions');
+  }
+}
+
+/**
+ * Check is user admin via project id
+ * @param context - resolver context
+ * @param projectId - project id to check
+ */
+async function checkByProjectId(context: ResolverContextWithUser, projectId: string): Promise<void> {
+  const project = await context.factories.projectsFactory.findById(projectId);
+
+  if (!project) {
+    throw new UserInputError('There is no project with provided ID');
+  }
+
+  await checkByWorkspaceId(context, project.workspaceId.toString());
+}
+
+/**
+ * Defines directive for accessing to a field only for admins
+ *
+ * Order to check workspace or project id:
+ * 1) args.workspaceId
+ * 2) args.input.workspaceId
+ * 3) args.projectId
+ * 4) args.input.projectId
+ */
+export default function requireAdminDirective(directiveName = 'requireAdmin') {
+  return {
+    requireAdminDirectiveTypeDefs: `
+    """
+    Access to the field only for admins
+    """
+    directive @${directiveName} on FIELD_DEFINITION
+    `,
+    requireAdminDirectiveTransformer: (schema: GraphQLSchema) =>
+      mapSchema(schema, {
+        [MapperKind.OBJECT_FIELD]: (fieldConfig, fieldName) => {
+          const requireAdminDirective = getDirective(schema, fieldConfig, directiveName)?.[0];
+
+          if (requireAdminDirective) {
+            const {
+              resolve = defaultFieldResolver,
+            } = fieldConfig;
+
+            /**
+             * New field resolver
+             * @param resolverArgs - default GraphQL resolver args
+             */
+            fieldConfig.resolve = async (...resolverArgs): UnknownGraphQLResolverResult => {
+              const [, args, context] = resolverArgs;
+
+              if (args.workspaceId) {
+                await checkByWorkspaceId(context, args.workspaceId);
+              }
+
+              if (args.input?.projectId) {
+                await checkByProjectId(context, args.input.projectId);
+              }
+
+              return resolve(...resolverArgs);
+            };
+          }
+          return fieldConfig;
+        }
+      })
+  }
+}