Unify graphql path

server/config/index.js

@@ -28,17 +28,19 @@ if (process.env.PLAYGROUND_VARIABLES_FILE) {
   }
 }
 
+const topLevelGraphqlPath = '/graphql'
 const port = process.env.HTTP_PORT || '8000'
 
 const config = {
   server: {
+    apiPath: topLevelGraphqlPath,
     port
   },
   graphQLConfig: {
     tracing: true
   },
   playgroundConfig: {
-    endpoint: '/graphql', // if you want GraphiQL enabled
+    endpoint: topLevelGraphqlPath, // if you want GraphiQL enabled
     query: playgroundQueryFileContent,
     variables: playgroundVariableFileContent,
     subscriptionEndpoint: process.env.PLAYGROUND_SUBS_ENDPOINT || `ws://${hostname()}:${port}/subscriptions`
@@ -90,8 +92,6 @@ if (process.env.SCHEMA_LISTENER_CONFIG) {
   }
 }
 
-playgroundQueryFileContent = fs.readFileSync(process.env.PLAYGROUND_QUERY_FILE, 'utf-8')
-
 if (process.env.KEYCLOAK_CONFIG_FILE) {
   try {
     let keycloakConfig = fs.readFileSync(process.env.KEYCLOAK_CONFIG_FILE, 'utf-8')

server/security/index.js

@@ -1,4 +1,4 @@
-const {log} = require('./lib/util/logger')
+const { log } = require('../lib/util/logger')
 const Keycloak = require('keycloak-connect')
 var session = require('express-session')
 
@@ -9,7 +9,7 @@ const config = require('../config')
  *
  * @param {*} expressRouter
  */
-exports.applyAuthMiddleware = (expressRouter) => {
+exports.applyAuthMiddleware = (expressRouter, apiPath) => {
   if (config.keycloakConfig) {
     log.info('Initializing Keycloak authentication')
     const memoryStore = new session.MemoryStore()
@@ -24,7 +24,12 @@ exports.applyAuthMiddleware = (expressRouter) => {
       store: memoryStore
     }, config.keycloakConfig)
 
+    // Install general keycloak middleware
     expressRouter.use(keycloak.middleware())
+
+    // Protect the main route for all graphql services
+    // (disable unauthenticated access)
+    expressRouter.use(apiPath, keycloak.protect())
   } else {
     log.info('Keycloak authentication is not configured')
   }

server/server.js

@@ -10,6 +10,7 @@ const {getMetrics, responseLoggingMetric} = require('./metrics')
 const {applyAuthMiddleware} = require('./security')
 const schemaParser = require('./lib/schemaParser')
 const schemaListenerCreator = require('./lib/schemaListeners/schemaListenerCreator')
+const { server } = require('./config')
 
 function newExpressApp () {
   let app = express()
@@ -18,12 +19,13 @@ function newExpressApp () {
 
   app.use('*', cors())
   app.use(expressPino)
-  applyAuthMiddleware(app)
+  applyAuthMiddleware(app, server.apiPath)
   return app
 }
 
 function newApolloServer (app, schema, httpServer, tracing, playgroundConfig) {
   let apolloServer = new ApolloServer({
+
     schema,
     context: async ({ req }) => {
       return {
@@ -41,7 +43,7 @@ function newApolloServer (app, schema, httpServer, tracing, playgroundConfig) {
       ]
     }
   })
-  apolloServer.applyMiddleware({ app })
+  apolloServer.applyMiddleware({ app, disableHealthCheck: true, path: server.apiPath })
   apolloServer.installSubscriptionHandlers(httpServer)
 
   return apolloServer