Hi, I am having some trouble with my Graphql serve...
# orm-helpn
Naka
10/26/2018, 7:07 PMHi, I am having some trouble with my Graphql server. I want to use some types created by Prisma abstraction but I don't want to expose all the Prisma API to the client. Is there a way to import prisma models in my schema defined in the graphql server?
l
lucas
10/26/2018, 7:10 PMhey daniel yes use prisma-binding
lucas
10/26/2018, 7:11 PMimport { Prisma } from 'prisma-binding'
const prisma = new Prisma({
typeDefs: 'src/generated/prisma.graphql',
endpoint: 'http://localhost:4466/app/folders',
})
export { prisma as default }
lucas
10/26/2018, 7:11 PMand
lucas
10/26/2018, 7:11 PMimport { GraphQLServer } from 'graphql-yoga'
import { importSchema } from 'graphql-import'
import prisma from './prisma'
import { resolvers, fragmentReplacements } from './resolvers/index'
const typeDefs = importSchema('./src/schema.graphql')
const server = new GraphQLServer({
typeDefs,
resolvers,
context(req) {
return {
prisma,
req
}
},
fragmentReplacements
})
export { server as default }
lucas
10/26/2018, 7:11 PMi used docker
n
Naka
10/26/2018, 7:14 PMwith this setup all the prisma-server api should be exposed to the client. (Correct me if I am wrong xD)
Naka
10/26/2018, 7:15 PMor is this the normal behaviour and all the security should be done in the graphql server layer?
l
lucas
10/26/2018, 7:18 PMno because my server listen to an other port and that is that port who communicate with the client
lucas
10/26/2018, 7:19 PMimport "@babel/polyfill/noConflict"
import server from './server'
server.start({ port: process.env.PORT || 4000 }, () => {
console.log('server listening')
})
lucas
10/26/2018, 7:19 PMand yes you have to do all the security
lucas
10/26/2018, 7:19 PMalso
n
Naka
10/26/2018, 7:20 PMbut
src/generated/prisma.graphqlNaka
10/26/2018, 7:22 PMI am new to graphql and prisma. Sorry if I am doing some dumb misundersting hahaha
l
lucas
10/26/2018, 7:22 PMprisma api is no secure at all you have to do this graphql server with node is a layer to hash password, block user etc...
lucas
10/26/2018, 7:23 PMyou have to do security in your resolvers
n
Naka
10/26/2018, 7:23 PMI got this point, I just don't want anyone that access the graphql server to have access to all the datamodels and api functions.
l
lucas
10/26/2018, 7:23 PMyou can't reach your prisma directly on graphqlserver you have to use resolvers
lucas
10/26/2018, 7:24 PMto get the parameter from prisma
lucas
10/26/2018, 7:24 PMyou parameter what you want from the api with the model i sent you
lucas
10/26/2018, 7:24 PMbut the client does not have access to prisma api
lucas
10/26/2018, 7:25 PMi dont know if im clear
n
Naka
10/26/2018, 7:27 PMah... I got it... I was trying to merge some schemas importing some
prisma.graphqlschema.graphqll
lucas
10/26/2018, 7:32 PMok nice 🙂 the way i model it is => you just call prisma when you want to use it in your resolvers but there is no way to the client to access to it
n
Naka
10/26/2018, 7:32 PMThanks lucas! 👍
👍 1
f
Fran Dios
10/27/2018, 4:17 AM@Naka You can import types from the generated Prisma schema to your app schema by using
graphql-import#import Post from "../generated/prisma.graphql"PostFran Dios
10/27/2018, 4:18 AM