feat: GraphQL base implementation

package.json

@@ -37,6 +37,7 @@
     "node": ">=6.11.1"
   },
   "dependencies": {
+    "apollo-server-express": "~1.0.4",
     "auto-load": "~3.0.0",
     "axios": "~0.16.2",
     "bcryptjs-then": "~1.0.1",
@@ -62,6 +63,7 @@
     "follow-redirects": "~1.2.4",
     "fs-extra": "~4.0.0",
     "git-wrapper2-promise": "~0.2.9",
+    "graphql": "~0.10.5",
     "highlight.js": "~9.12.0",
     "i18next": "~8.4.3",
     "i18next-express-middleware": "~1.0.5",

server/index.js

@@ -65,6 +65,8 @@ const session = require('express-session')
 const SessionRedisStore = require('connect-redis')(session)
 const graceful = require('node-graceful')
 const socketio = require('socket.io')
+const graphqlApollo = require('apollo-server-express')
+const graphqlSchema = require('./modules/graphql')
 
 var mw = autoload(path.join(wiki.SERVERPATH, '/middlewares'))
 var ctrl = autoload(path.join(wiki.SERVERPATH, '/controllers'))
@@ -167,6 +169,8 @@ app.use(mw.flash)
 
 app.use('/', ctrl.auth)
 
+app.use('/graphql', graphqlApollo.graphqlExpress({ schema: graphqlSchema }))
+app.use('/graphiql', graphqlApollo.graphiqlExpress({ endpointURL: '/graphql' }))
 app.use('/uploads', mw.auth, ctrl.uploads)
 app.use('/admin', mw.auth, ctrl.admin)
 app.use('/', mw.auth, ctrl.pages)

server/middlewares/security.js

@@ -1,7 +1,5 @@
 'use strict'
 
-/* global app */
-
 /**
  * Security Middleware
  *
@@ -12,7 +10,7 @@
  */
 module.exports = function (req, res, next) {
   // -> Disable X-Powered-By
-  app.disable('x-powered-by')
+  req.app.disable('x-powered-by')
 
   // -> Disable Frame Embedding
   res.set('X-Frame-Options', 'deny')

server/models/user.js

@@ -99,7 +99,7 @@ module.exports = (sequelize, DataTypes) => {
             deny: false
           }]
         }
-        return db.User.create(nUsr)
+        return wiki.db.User.create(nUsr)
       }
       return user || Promise.reject(new Error(wiki.lang.t('auth:errors:notyetauthorized')))
     })

server/modules/auth.js

@@ -214,20 +214,17 @@ module.exports = function (passport) {
 
         return wiki.db.User.create({
           provider: 'local',
-          email: 'guest',
+          email: 'guest@example.com',
           name: 'Guest',
           password: '',
-          rights: [{
+          role: 'guest'
-            role: 'read',
-            path: '/',
-            exact: false,
-            deny: !wiki.config.public
-          }]
         }).then(() => {
           wiki.logger.info('[AUTH] Guest account created successfully!')
+          return true
         }).catch((err) => {
           wiki.logger.error('[AUTH] An error occured while creating guest account:')
           wiki.logger.error(err)
+          return err
         })
       }
     }).then(() => {
@@ -241,17 +238,14 @@ module.exports = function (passport) {
               email: process.env.WIKI_ADMIN_EMAIL,
               name: 'Administrator',
               password: '$2a$04$MAHRw785Xe/Jd5kcKzr3D.VRZDeomFZu2lius4gGpZZ9cJw7B7Mna', // admin123 (default)
-              rights: [{
+              role: 'admin'
-                role: 'admin',
-                path: '/',
-                exact: false,
-                deny: false
-              }]
             }).then(() => {
               wiki.logger.info('[AUTH] Root admin account created successfully!')
+              return true
             }).catch((err) => {
               wiki.logger.error('[AUTH] An error occured while creating root admin account:')
               wiki.logger.error(err)
+              return err
             })
           } else { return true }
         })

server/modules/db.js

@@ -64,8 +64,7 @@ module.exports = {
     // Sync DB
 
     self.onReady = self.inst.sync({
-      force: false,
+      force: false
-      logging: wiki.logger.verbose
     })
 
     return self

server/modules/graphql.js

@@ -0,0 +1,67 @@
+'use strict'
+
+/* global wiki */
+
+const gql = require('graphql')
+
+const User = new gql.GraphQLObjectType({
+  name: 'User',
+  description: 'A User',
+  fields() {
+    return {
+      id: {
+        type: gql.GraphQLInt,
+        resolve(usr) {
+          return usr.id
+        }
+      },
+      email: {
+        type: gql.GraphQLString,
+        resolve(usr) {
+          return usr.email
+        }
+      },
+      provider: {
+        type: gql.GraphQLString,
+        resolve(usr) {
+          return usr.provider
+        }
+      },
+      providerId: {
+        type: gql.GraphQLString,
+        resolve(usr) {
+          return usr.providerId
+        }
+      }
+    }
+  }
+})
+
+const Query = new gql.GraphQLObjectType({
+  name: 'Query',
+  description: 'Root Query',
+  fields() {
+    return {
+      users: {
+        type: new gql.GraphQLList(User),
+        args: {
+          id: {
+            type: gql.GraphQLInt
+          },
+          email: {
+            type: gql.GraphQLString
+          }
+        },
+        resolve(root, args) {
+          return wiki.db.User.findAll({ where: args })
+        }
+      }
+    }
+  }
+})
+
+const Schema = new gql.GraphQLSchema({
+  query: Query
+})
+
+module.exports = Schema