How to create a mutation after being authorized?
<...
# prisma-whats-newp
playra
12/19/2017, 7:06 PMHow to create a mutation after being authorized?
https://www.graph.cool/forum/t/permission-insufficient-permissions-for-this-mutation-code-3008/1939
i
illuday
12/19/2017, 7:51 PMDid you add the Authorization header ? { Authorization : 'Bearer '+token }
p
playra
12/19/2017, 7:54 PMYes
playra
12/19/2017, 7:55 PMIs there an example connecting Authentication
https://github.com/graphcool/framework/tree/master/examples/auth
and simple CRUD?
https://github.com/graphcool/framework/tree/master/examples/crud-api
f
Fitch
12/19/2017, 7:58 PMIf you go under Permissions and POST - the create field .. what does the permissions say?
Fitch
12/19/2017, 7:59 PM Copy code
const client = new GraphQLClient('<https://api.graph.cool/simple/v1/backpack-blue>', {
headers: {
Authorization: 'Bearer bunchOFlettersKey',
},
})p
playra
12/19/2017, 8:00 PMCrossed out
playra
12/19/2017, 8:00 PMpermissions: []
f
Fitch
12/19/2017, 8:00 PMProbable have to enable that for a user or everyone as a test
p
playra
12/19/2017, 8:01 PMpermission exapmle is empty
https://github.com/graphcool/framework/blob/master/examples/permissions
f
Fitch
12/19/2017, 8:02 PMdoing it via cli?
p
playra
12/19/2017, 8:02 PMThey are not active when you click
playra
12/19/2017, 8:03 PMcli
f
Fitch
12/19/2017, 8:03 PMhttps://github.com/graphcool/framework/tree/master/cli/packages/graphcool-cli The readme has a sample .. ill see if I can find a better one
p
playra
12/19/2017, 8:04 PMpermissions:
- operation: "*"
?
f
Fitch
12/19/2017, 8:05 PMYeah, then specify operations/schema .. trying to dig up some good code from our library
Fitch
12/19/2017, 8:07 PMOh .. heres a good one - https://alligator.io/graphql/graphcool-permissions/
👍 1
p
playra
12/19/2017, 8:07 PMI try to combine these two examples, but not yet
Authentication
https://github.com/graphcool/framework/tree/master/examples/auth
and CRUD
https://github.com/graphcool/framework/tree/master/examples/crud-api
playra
12/19/2017, 8:08 PMexcellent, I'll try)
f
Fitch
12/19/2017, 8:08 PMyeah its all based around the yml updating the permissions .. you can verify in the console ..
Fitch
12/19/2017, 8:09 PMI use a unit test .. basically a queyr that should work and a query that shouldnt work to validate
Fitch
12/19/2017, 8:12 PMTesting from Playground with Auth too - https://www.graph.cool/docs/reference/auth/authorization/permission-queries-iox3aqu0ee/
Fitch
12/19/2017, 8:13 PMhttps://www.graph.cool/forum/t/create-permissions-disallowing-reads-on-user-type/1574 - Another way to say it
p
playra
12/19/2017, 8:29 PMThanks 😃
playra
12/19/2017, 8:40 PMNow
Copy code
permissions:
- operation: User.read
- operation: User.create
authenticated: true
- operation: User.update
authenticated: true
- operation: User.delete
authenticated: true
- operation: Post.read
- operation: Post.create
authenticated: true
- operation: Post.update
authenticated: true
- operation: Post.delete
authenticated: true
- operation: Comment.read
- operation: Comment.create
authenticated: true
- operation: Comment.update
authenticated: true
- operation: Comment.delete
authenticated: trueplayra
12/19/2017, 8:41 PM"code": 3032,
"message": "The field 'author' on type 'Post' is required. Performing this mutation would violate the constraint"
Does the author fill in the field automatically?
f
Fitch
12/19/2017, 10:13 PMauthor is set to a required field author! .. and it looks like the relation @StudioPosts doesnt exist?
p
playra
12/19/2017, 10:34 PMsimplified the task 😃
https://www.graph.cool/forum/t/no-connect-permissions/1940
I need example simple todo-list with authorization
🦜 1
f
Fitch
12/19/2017, 10:56 PMDid you add Todo.create? and it shows Everyone in console
Fitch
12/19/2017, 10:56 PMp
playra
12/20/2017, 4:42 PMAll earned thanks 😃
2 Views