Log in subscribers when broadcasting a subscription update

composer.json

@@ -25,6 +25,7 @@
     "require": {
         "php": ">= 7.1",
         "ext-json": "*",
+        "illuminate/auth": "5.5.* || 5.6.* || 5.7.* || 5.8.* || ^6.0 || ^7.0",
         "illuminate/contracts": "5.5.* || 5.6.* || 5.7.* || 5.8.* || ^6.0 || ^7.0",
         "illuminate/http": "5.5.* || 5.6.* || 5.7.* || 5.8.* || ^6.0 || ^7.0",
         "illuminate/pagination": "5.5.* || 5.6.* || 5.7.* || 5.8.* || ^6.0 || ^7.0",

src/Subscriptions/Contracts/SubscriptionIterator.php

@@ -8,9 +8,18 @@
 interface SubscriptionIterator
 {
     /**
-     * Process collection of items.
+     * Process subscribers.
      *
+     * @param  \Illuminate\Support\Collection<\Nuwave\Lighthouse\Subscriptions\Subscriber>  $subscribers
+     * The subscribers that receive the current subscription.
+     *
+     * @param  \Closure  $handleSubscriber
+     * Receives each subscriber in the passed in collection.
+     * function(\Nuwave\Lighthouse\Subscriptions\Subscriber $subscriber): void
+     *
+     * @param  \Closure|null  $onError
+     * Is called when $handleSubscriber throws.
      * @return void
      */
-    public function process(Collection $items, Closure $cb, Closure $error = null);
+    public function process(Collection $subscribers, Closure $handleSubscriber, Closure $onError = null);
 }

src/Subscriptions/Iterators/GuardContextSyncIterator.php

@@ -0,0 +1,66 @@
+<?php
+
+namespace Nuwave\Lighthouse\Subscriptions\Iterators;
+
+use Closure;
+use Exception;
+use Illuminate\Contracts\Auth\Factory;
+use Illuminate\Contracts\Config\Repository;
+use Illuminate\Support\Collection;
+use Nuwave\Lighthouse\Subscriptions\Contracts\SubscriptionIterator;
+use Nuwave\Lighthouse\Subscriptions\Subscriber;
+use Nuwave\Lighthouse\Subscriptions\SubscriptionGuard;
+
+class GuardContextSyncIterator implements SubscriptionIterator
+{
+    /**
+     * @var \Illuminate\Contracts\Config\Repository
+     */
+    private $configRepository;
+
+    /**
+     * @var \Illuminate\Contracts\Auth\Factory
+     */
+    private $authFactory;
+
+    public function __construct(Repository $configRepository, Factory $authFactory)
+    {
+        $this->authFactory = $authFactory;
+        $this->configRepository = $configRepository;
+    }
+
+    public function process(Collection $subscribers, Closure $handleSubscriber, Closure $onError = null): void
+    {
+        // Store the previous default guard name so we can restore it after we're done
+        $previousGuardName = $this->configRepository->get('auth.defaults.guard');
+
+        // Set our subscription guard as the default guard for the application
+        $this->authFactory->shouldUse(SubscriptionGuard::GUARD_NAME);
+
+        /** @var \Nuwave\Lighthouse\Subscriptions\SubscriptionGuard $guard */
+        $guard = $this->authFactory->guard(SubscriptionGuard::GUARD_NAME);
+
+        $subscribers->each(static function (Subscriber $item) use ($handleSubscriber, $onError, $guard): void {
+            // If there is an authenticated user set in the context, set that user as the authenticated user
+            if ($item->context->user()) {
+                $guard->setUser($item->context->user());
+            }
+
+            try {
+                $handleSubscriber($item);
+            } catch (Exception $e) {
+                if (! $onError) {
+                    throw $e;
+                }
+
+                $onError($e);
+            } finally {
+                // Unset the authenticated user after each iteration to restore the guard to a unauthenticated state
+                $guard->reset();
+            }
+        });
+
+        // Restore the previous default guard name
+        $this->authFactory->shouldUse($previousGuardName);
+    }
+}

src/Subscriptions/Iterators/SyncIterator.php

@@ -9,20 +9,17 @@
 
 class SyncIterator implements SubscriptionIterator
 {
-    /**
-     * Process collection of items.
-     */
-    public function process(Collection $items, Closure $cb, Closure $error = null): void
+    public function process(Collection $subscribers, Closure $handleSubscriber, Closure $onError = null): void
     {
-        $items->each(function ($item) use ($cb, $error): void {
+        $subscribers->each(static function ($item) use ($handleSubscriber, $onError): void {
             try {
-                $cb($item);
+                $handleSubscriber($item);
             } catch (Exception $e) {
-                if (! $error) {
+                if (! $onError) {
                     throw $e;
                 }
 
-                $error($e);
+                $onError($e);
             }
         });
     }

src/Subscriptions/SubscriptionGuard.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace Nuwave\Lighthouse\Subscriptions;
+
+use Illuminate\Auth\GuardHelpers;
+use Illuminate\Contracts\Auth\Guard;
+use RuntimeException;
+
+class SubscriptionGuard implements Guard
+{
+    use GuardHelpers;
+
+    public const GUARD_NAME = 'lighthouse_subscriptions';
+
+    public function user()
+    {
+        return $this->user;
+    }
+
+    public function reset()
+    {
+        $this->user = null;
+    }
+
+    public function validate(array $credentials = [])
+    {
+        throw new RuntimeException('The Lighthouse subscription guard cannot be used for credential based authentication.');
+    }
+}

src/Subscriptions/SubscriptionServiceProvider.php

@@ -2,6 +2,7 @@
 
 namespace Nuwave\Lighthouse\Subscriptions;
 
+use Illuminate\Auth\AuthManager;
 use Illuminate\Contracts\Config\Repository as ConfigRepository;
 use Illuminate\Contracts\Events\Dispatcher as EventsDispatcher;
 use Illuminate\Support\ServiceProvider;
@@ -16,6 +17,7 @@
 use Nuwave\Lighthouse\Subscriptions\Contracts\SubscriptionIterator;
 use Nuwave\Lighthouse\Subscriptions\Events\BroadcastSubscriptionEvent;
 use Nuwave\Lighthouse\Subscriptions\Events\BroadcastSubscriptionListener;
+use Nuwave\Lighthouse\Subscriptions\Iterators\GuardContextSyncIterator;
 use Nuwave\Lighthouse\Subscriptions\Iterators\SyncIterator;
 use Nuwave\Lighthouse\Support\Contracts\ProvidesSubscriptionResolver;
 
@@ -50,6 +52,21 @@ public function boot(EventsDispatcher $eventsDispatcher, ConfigRepository $confi
                 $this->app->make('router')
             );
         }
+
+        // Test if the auth manager is bound to the container before using it in case the application is not using any authentication
+        if ($this->app->bound(AuthManager::class)) {
+            config([
+                'auth.guards.'.SubscriptionGuard::GUARD_NAME => [
+                    'driver' => SubscriptionGuard::GUARD_NAME,
+                ],
+            ]);
+
+            $this->app->bind(SubscriptionIterator::class, GuardContextSyncIterator::class);
+
+            $this->app->make(AuthManager::class)->extend(SubscriptionGuard::GUARD_NAME, static function () {
+                return new SubscriptionGuard;
+            });
+        }
     }
 
     /**