5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
# File 'app/controllers/has_helpers/graphql_extensions.rb', line 5
def execute_graphql_schema(
schema,
current_user,
current_application: ::HasHelpers::Application.current_application(request),
skip_authorization: false,
**ctx
)
abilities ||= {}
context = {
authorize: ->(action, object, parent_klass = object.class) {
return true if skip_authorization
klass = parent_klass < ::ActiveRecord::Base ? parent_klass.base_class : parent_klass
ability = abilities[klass] ||= Ability.new(current_user, current_application, klass)
ability.can?(action, object)
},
current_application: current_application,
current_organization: current_user&.organization,
current_user: current_user,
request: self.request,
response: self.response,
**ctx
}
result = if params[:_json]
queries = params[:_json].map do |param|
{
query: param[:query],
context: context,
operation_name: param[:operationName],
variables: ensure_hash(param[:variables])
}
end
schema.multiplex(queries)
else
schema.execute(
params[:query],
context: context,
operation_name: params[:operationName],
variables: ensure_hash(params[:variables])
)
end
render json: result rescue => e
::HasUtils::Env.run_on_environment excluded: [::HasUtils::Env::DEVELOPMENT] do
raise e
end
handle_error_in_development e
end
|