Custom @skip directive

[Risbot]

How to omit fields from a query based on authorization?
Something like @Skip directiva, but instead of an if, an authorization condition would be used.

It would be used as:

query {
  user(id: "id") {
     name
     birthday @includeWhenAuth
  }
}

[Risbot]

Anybody can help?

[Risbot]

I would rather skip this field, as the skip directive does, than set the field as nulable. Is there any way to do this in midleware?

[PascalSenn]

yes but not in a execution middleware, you could theoretically do this in a request middleware, but if you remove the field from the request, you loos spec compliance. Meaning, most tooling will break. this is not recommended. but if you insist:

services.AddGraphQLServer() 
...
.UseRequest( /* your code*/) 
.UseDefaultPipeline();

This is how you can register the request middleware. You then have to visit the requested graphql document and rewrite it.

[michaelstaib]

Its more difficult than this. The request compiler would need to remove the field. Essentially when we compile the request we now directives that can skip fields. I would say its rather difficult at the moment. We have some upcoming work on skip and include and I can have a look at allowing a hook into this.

[Risbot]

Thank you for your replies, it would be great when we will have option for skip field. Is it at least possible to dynamically change fields from nonnulable to nulable in midleware?

[Risbot]

@PascalSenn I tried your middleware solution, but it seems that Authorize middleware ignores the order of middlewares, as it always returns an error message that I am not logged in․