added support for argument fields

[cotzo]

No description provided.

[joemcbride]

Would you also mind adding a test for this? I believe this scenario will not currently work with "Schema First" syntax, so the test will have to be written with the "Graph type first" approach.

[joemcbride]

Instead of a hard-coded OperationType.Mutation this should be the operationType variable that was matched and assigned previously in the node stack. You can have an input object on queries and subscriptions.

[cotzo]

agree. will update once we decide on the validation part

[joemcbride]

This should be able to be simplified to:

var fieldType = context.TypeInfo.GetInputType();
CheckAuth(...);

The TypeInfo class does that lookup for you.

[cotzo]

Authorization Metadata is not set on the input type but on the EventStreamFieldType so that's why we need to search for the type of the field

[joemcbride]

Yes, that is commonly needed, so TypeInfo does that exact same code.

https://github.com/graphql-dotnet/graphql-dotnet/blob/677c30642617d9dc66e3e454269002d4b10940cd/src/GraphQL/Validation/TypeInfo.cs#L148-L161

[cotzo]

unfortunately in my setup GetInputType() returns EnumerationGraphType instead of EventStreamFieldType

[cotzo]

Posting here my current setup

mutation {
  account_update(account: {
    id: "9b6bb020-0892-44f8-89b9-067000f57d80"
    type: ADMIN
  }) {
    id
  }
}

 FieldAsync<AccountType>(
                "account_update",
                arguments: new QueryArguments(
                    new QueryArgument<NonNullGraphType<AccountInputTypeUpdate>> {Name = "account"}
                ),
                resolve: async context => 
                {
                    return await UpdateObjectAsync(context, accountsRepository, "account");
                });

public class AccountInputTypeUpdate : InputObjectGraphType<Account>
    {
        public AccountInputTypeUpdate()
        {
            Field(x => x.Id);
            Field(x => x.Type, true, typeof(EnumerationGraphType<AccountType>))
                .AuthorizeWith("Admin");
        }
    }

[joemcbride]

You're right! It is passing that ResolvedType and not the FieldType. Sorry about that!

[cotzo]

no problem ;) happy that it's solved

[joemcbride]

Have this published, will take a while for Nuget.org to index it.

https://www.nuget.org/packages/GraphQL.Authorization/1.1.26