Ocelot-Social/src/middleware/permissionsMiddleware.js

import { rule, shield, and, or, not, allow } from 'graphql-shield'

const isAuthenticated = rule()(async (parent, args, ctx, info) => {
  // TODO: how to get this working while seeding?
  console.log('isSeeding', process.env.IS_SEEDING)
  if (process.env.IS_SEEDING === true) {
    return true
  }
  return ctx.user !== null
})
const isOwner = rule()(async (parent, args, ctx, info) => {
  // TODO: how to get this working while seeding?
  console.log('isSeeding', process.env.IS_SEEDING)
  if (process.env.IS_SEEDING === true) {
    return true
  }
  console.log('parent', parent)
  return ctx.user.id === parent.id
})
const isAdmin = rule()(async (parent, args, ctx, info) => {
  // TODO: how to get this working while seeding?
  console.log('isSeeding', process.env.IS_SEEDING)
  if (process.env.IS_SEEDING === true) {
    return true
  }
  return ctx.user.role === 'ADMIN'
})
const isModerator = rule()(async (parent, args, ctx, info) => {
  // TODO: how to get this working while seeding?
  console.log('isSeeding', process.env.IS_SEEDING)
  if (process.env.IS_SEEDING === true) {
    return true
  }
  return ctx.user.role === 'MODERATOR'
})

// Permissions
const permissions = shield({
  Query: {
    statistics: isAdmin
    // fruits: and(isAuthenticated, or(isAdmin, isModerator)),
    // customers: and(isAuthenticated, isAdmin)
  },
  Mutation: {
    // addFruitToBasket: isAuthenticated
  },
  User: {
    email: isOwner,
    password: isOwner
  },
  Post: isAuthenticated
})

export default permissions