B2B-2204: Implement Toggle For Enabling/Disabling Session Support for GraphQL

Author: rganin

app/code/Magento/GraphQl/Model/Config/DisableSession.php

@@ -0,0 +1,53 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\GraphQl\Model\Config;
+
+use Magento\Framework\App\Config\ScopeConfigInterface;
+
+/**
+ * Config for catalog media
+ */
+class DisableSession
+{
+    private const XML_PATH_GRAPHQL_DISABLE_SESSION = 'graphql/session/disable';
+
+    /**
+     * @var ScopeConfigInterface
+     */
+    private $scopeConfig;
+
+    /**
+     * @param ScopeConfigInterface $scopeConfig
+     */
+    public function __construct(ScopeConfigInterface $scopeConfig)
+    {
+        $this->scopeConfig = $scopeConfig;
+    }
+
+    /**
+     * Get config value is session disabled for grapqhl area.
+     *
+     * @param string $scopeType
+     * @param null|int|string $scopeCode
+     * @return bool
+     */
+    public function isDisabled($scopeType = ScopeConfigInterface::SCOPE_TYPE_DEFAULT, $scopeCode = null): bool
+    {
+        $value = $this->scopeConfig->getValue(
+            self::XML_PATH_GRAPHQL_DISABLE_SESSION,
+            $scopeType,
+            $scopeCode
+        );
+
+        if ($value === null) {
+            return false;
+        }
+
+        return (bool)$value;
+    }
+}

app/code/Magento/GraphQl/Plugin/DisableSession.php

@@ -0,0 +1,67 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+declare(strict_types=1);
+
+namespace Magento\GraphQl\Plugin;
+
+use Magento\Framework\App\Area;
+use Magento\Framework\App\State;
+use Magento\Framework\Exception\LocalizedException;
+use Magento\Framework\Session\SessionStartChecker;
+use Magento\GraphQl\Model\Config\DisableSession as DisableSessionConfig;
+
+/**
+ * Disable session in graphql area if configured.
+ */
+class DisableSession
+{
+    /**
+     * @var DisableSessionConfig
+     */
+    private $disableSessionConfig;
+
+    /**
+     * @var State
+     */
+    private $appState;
+
+    /**
+     * @param DisableSessionConfig $disableSessionConfig
+     * @param State $appState
+     */
+    public function __construct(
+        DisableSessionConfig $disableSessionConfig,
+        State $appState
+    ) {
+        $this->disableSessionConfig = $disableSessionConfig;
+        $this->appState = $appState;
+    }
+
+    /**
+     * Prevents session starting while in graphql area and session is disabled in config.
+     * Returns true if session is allowed to start and false to avoid starting the session.
+     * @see \Magento\Framework\Session\SessionStartChecker::check
+     *
+     * @param SessionStartChecker $subject
+     * @param bool $result
+     * @return bool
+     * @SuppressWarnings(PHPMD.UnusedFormalParameter)
+     */
+    public function afterCheck(SessionStartChecker $subject, bool $result): bool
+    {
+        try {
+            if (!$result ||
+                ($this->appState->getAreaCode() === Area::AREA_GRAPHQL && $this->disableSessionConfig->isDisabled())
+            ) {
+                return false;
+            }
+        } catch (LocalizedException $e) {
+            // If area code is not set.
+        } finally {
+            return $result;
+        }
+    }
+}

app/code/Magento/GraphQl/etc/adminhtml/system.xml

@@ -26,6 +26,14 @@
                     </depends>
                 </field>
             </group>
+            <group id="graphql_session" translate="label" type="text" sortOrder="20" showInDefault="0" showInWebsite="0" showInStore="0">
+                <label>GraphQl Session Management</label>
+                <field id="disabled" translate="label" type="select" sortOrder="20" showInDefault="0" showInWebsite="0" showInStore="0">
+                    <source_model>Magento\Config\Model\Config\Source\Yesno</source_model>
+                    <label>Disable session</label>
+                    <config_path>graphql/session/disable</config_path>
+                </field>
+            </group>
         </section>
     </system>
 </config>

app/code/Magento/GraphQl/etc/graphql/di.xml

@@ -38,4 +38,7 @@
             </argument>
         </arguments>
     </type>
+    <type name="Magento\Framework\Session\SessionStartChecker">
+        <plugin name="graphql_session_disable" type="Magento\GraphQl\Plugin\DisableSession"/>
+    </type>
 </config>