added permission: Perform introspection query on GraphQL endpoint.

Author: klokie

graphql_api.module

@@ -50,7 +50,11 @@ function graphql_api_permission() {
   return array(
     'use graphql_api query' => array(
       'title' => t('Use GraphQL query'),
-      'description' => t('Perform query on graphql endpoint.'),
+      'description' => t('Perform query on GraphQL endpoint.'),
+    ),
+    'use graphql_api introspection' => array(
+      'title' => t('Browse GraphQL schema'),
+      'description' => t('Perform introspection query on GraphQL endpoint.'),
     ),
   );
 }
@@ -150,4 +154,4 @@ function graphql_api() {
     $obj = new Schema;
   }
   return $obj;
-}
+}

includes/graphql_api_page_callback.inc

@@ -15,23 +15,22 @@ function graphql_api_page_callback() {
     $data = $_POST;
   }
 
-  if (!empty($data)) {
-    if (empty($data['variables'])) {
-      $data['variables'] = [];
-    }
-  }
-
-  if (empty($data['query'])) {
-    $data['query'] = file_get_contents(__DIR__ . '/../tests/fixtures/instrospec.graphql');
-    $is_introspec = TRUE;
-  }
-
   $requestString = isset($data['query']) ? $data['query'] : null;
   $operationName = isset($data['operation']) ? $data['operation'] : null;
-  $variableValues = isset($data['variables']) ? $data['variables'] : null;
+  $variableValues = isset($data['variables']) ? $data['variables'] : [];
 
-  $is_introspec = FALSE;
   try {
+    if (empty($requestString)) {
+      if( user_access('use graphql_api introspection') ) {
+        $requestString = file_get_contents(__DIR__ . '/../tests/fixtures/instrospec.graphql');
+        $is_introspec = TRUE;
+
+      } else {
+        throw new Exception(t("User without permission `use graphql_api introspection` cannot browse the schema"));
+      }
+    }
+
+    $is_introspec = FALSE; // @FIXME
     if ($is_introspec && $cache = cache_get('graphql_api_introspec') && empty($_GET['nocache'])) {
       $result = $cache->data;
     } else {
@@ -47,7 +46,7 @@ function graphql_api_page_callback() {
         $variableValues,
         $operationName
       );
-      
+
       if (!empty($schemaBuilder->errors)) {
         $result['schema_errors'] = $schemaBuilder->errors;
       }
@@ -63,7 +62,7 @@ function graphql_api_page_callback() {
       ]
     ];
   }
-  
+
   drupal_json_output($result);
   exit;
-}
+}