Add support for context Subject

Author: yrashk

gradle.properties

@@ -1 +1 @@
-version = 0.4.4
+version = 0.5.0

src/main/java/graphql/servlet/GraphQLContext.java

@@ -14,18 +14,22 @@
  */
 package graphql.servlet;
 
-import lombok.AllArgsConstructor;
 import lombok.Getter;
+import lombok.NonNull;
+import lombok.RequiredArgsConstructor;
 import lombok.Setter;
 
+import javax.security.auth.Subject;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
 import java.util.Optional;
 
-@AllArgsConstructor
+@RequiredArgsConstructor
 public class GraphQLContext {
-    @Getter @Setter
+    @Getter @Setter @NonNull
     private Optional<HttpServletRequest> request;
-    @Getter @Setter
+    @Getter @Setter @NonNull
     private Optional<HttpServletResponse> response;
+    @Getter @Setter
+    private Optional<Subject> subject = Optional.empty();
 }

src/main/java/graphql/servlet/GraphQLServlet.java

@@ -31,13 +31,18 @@
 import org.osgi.service.component.annotations.ReferenceCardinality;
 import org.osgi.service.component.annotations.ReferencePolicy;
 
+import javax.security.auth.Subject;
 import javax.servlet.Servlet;
 import javax.servlet.ServletException;
 import javax.servlet.http.HttpServlet;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
 import java.io.IOException;
 import java.io.InputStreamReader;
+import java.security.AccessController;
+import java.security.PrivilegedAction;
+import java.security.PrivilegedActionException;
+import java.security.PrivilegedExceptionAction;
 import java.util.*;
 import java.util.stream.Collectors;
 
@@ -165,23 +170,34 @@ protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws S
     }
 
     private void query(String query, Map<String, Object> variables, GraphQLSchema schema, HttpServletRequest req, HttpServletResponse resp) throws IOException {
-        ExecutionResult result = new GraphQL(schema, new EnhancedExecutionStrategy()).execute(query, createContext(Optional.of(req), Optional.of(resp)), variables);
-        resp.setContentType("application/json");
-        if (result.getErrors().isEmpty()) {
-            Map<String, Object> dict = new HashMap<>();
-            dict.put("data", result.getData());
-            resp.getWriter().write(new ObjectMapper().writeValueAsString(dict));
+        GraphQLContext context = createContext(Optional.of(req), Optional.of(resp));
+        if (Subject.getSubject(AccessController.getContext()) == null && context.getSubject().isPresent()) {
+            Subject.doAs(context.getSubject().get(), new PrivilegedAction<Void>() {
+                @Override @SneakyThrows
+                public Void run() {
+                    query(query, variables, schema, req, resp);
+                    return null;
+                }
+            });
         } else {
-            result.getErrors().stream().
-                    filter(error -> (error instanceof ExceptionWhileDataFetching)).
-                    forEachOrdered(err -> log.error("{}", ((ExceptionWhileDataFetching)err).getException()));
+            ExecutionResult result = new GraphQL(schema, new EnhancedExecutionStrategy()).execute(query, context, variables);
+            resp.setContentType("application/json");
+            if (result.getErrors().isEmpty()) {
+                Map<String, Object> dict = new HashMap<>();
+                dict.put("data", result.getData());
+                resp.getWriter().write(new ObjectMapper().writeValueAsString(dict));
+            } else {
+                result.getErrors().stream().
+                        filter(error -> (error instanceof ExceptionWhileDataFetching)).
+                        forEachOrdered(err -> log.error("{}", ((ExceptionWhileDataFetching) err).getException()));
 
-            resp.setStatus(500);
-            List<GraphQLError> errors = getGraphQLErrors(result);
-            Map<String, Object> dict = new HashMap<>();
-            dict.put("errors",errors);
+                resp.setStatus(500);
+                List<GraphQLError> errors = getGraphQLErrors(result);
+                Map<String, Object> dict = new HashMap<>();
+                dict.put("errors", errors);
 
-            resp.getWriter().write(new ObjectMapper().writeValueAsString(dict));
+                resp.getWriter().write(new ObjectMapper().writeValueAsString(dict));
+            }
         }
     }