e64f6f8569
enforces user admin role requirement for - creating / deleting / setting role for organization users - creating / deleting / setting role for project users - updating project name - deleting project hides action elements based on role for - admin console - team settings if team is only visible through project membership - add project tile if not team admin - project name text editor if not team / project admin - add redirect from team page if settings only visible through project membership - add redirect from admin console if not org admin role enforcement is handled on the api side through a custom GraphQL directive `hasRole`. on the client side, role information is fetched in the TopNavbar's `me` query and stored in the `UserContext`. there is a custom hook, `useCurrentUser`, that provides a user object with two functions, `isVisibile` & `isAdmin` which is used to check roles in order to render/hide relevant UI elements.
149 lines
4.3 KiB
TypeScript
149 lines
4.3 KiB
TypeScript
import React from 'react';
|
|
import ReactDOM from 'react-dom';
|
|
import axios from 'axios';
|
|
import createAuthRefreshInterceptor from 'axios-auth-refresh';
|
|
import { ApolloProvider } from '@apollo/react-hooks';
|
|
import { ApolloClient } from 'apollo-client';
|
|
import { HttpLink } from 'apollo-link-http';
|
|
import { onError } from 'apollo-link-error';
|
|
import { enableMapSet } from 'immer';
|
|
import { ApolloLink, Observable, fromPromise } from 'apollo-link';
|
|
import { getAccessToken, getNewToken, setAccessToken } from 'shared/utils/accessToken';
|
|
import cache from './App/cache';
|
|
import App from './App';
|
|
|
|
// https://able.bio/AnasT/apollo-graphql-async-access-token-refresh--470t1c8
|
|
enableMapSet();
|
|
|
|
let forward$;
|
|
let isRefreshing = false;
|
|
let pendingRequests: any = [];
|
|
|
|
const refreshAuthLogic = (failedRequest: any) =>
|
|
axios.post('/auth/refresh_token', {}, { withCredentials: true }).then(tokenRefreshResponse => {
|
|
setAccessToken(tokenRefreshResponse.data.accessToken);
|
|
failedRequest.response.config.headers.Authorization = `Bearer ${tokenRefreshResponse.data.accessToken}`;
|
|
return Promise.resolve();
|
|
});
|
|
|
|
createAuthRefreshInterceptor(axios, refreshAuthLogic);
|
|
|
|
const resolvePendingRequests = () => {
|
|
pendingRequests.map((callback: any) => callback());
|
|
pendingRequests = [];
|
|
};
|
|
|
|
const resolvePromise = (resolve: () => void) => {
|
|
pendingRequests.push(() => resolve());
|
|
};
|
|
|
|
const resetPendingRequests = () => {
|
|
pendingRequests = [];
|
|
};
|
|
|
|
const setRefreshing = (newVal: boolean) => {
|
|
isRefreshing = newVal;
|
|
};
|
|
|
|
const errorLink = onError(({ graphQLErrors, networkError, operation, forward }) => {
|
|
if (graphQLErrors) {
|
|
for (const err of graphQLErrors) {
|
|
if (err.extensions && err.extensions.code) {
|
|
switch (err.extensions.code) {
|
|
case 'UNAUTHENTICATED':
|
|
if (!isRefreshing) {
|
|
setRefreshing(true);
|
|
forward$ = fromPromise(
|
|
getNewToken()
|
|
.then((response: any) => {
|
|
setAccessToken(response.accessToken);
|
|
resolvePendingRequests();
|
|
return response.accessToken;
|
|
})
|
|
.catch(() => {
|
|
resetPendingRequests();
|
|
// TODO
|
|
// Handle token refresh errors e.g clear stored tokens, redirect to login, ...
|
|
return undefined;
|
|
})
|
|
.finally(() => {
|
|
setRefreshing(false);
|
|
}),
|
|
).filter(value => Boolean(value));
|
|
} else {
|
|
forward$ = fromPromise(new Promise(resolvePromise));
|
|
}
|
|
return forward$.flatMap(() => forward(operation));
|
|
default:
|
|
// pass
|
|
}
|
|
}
|
|
}
|
|
}
|
|
if (networkError) {
|
|
console.log(`[Network error]: ${networkError}`);
|
|
}
|
|
return undefined;
|
|
});
|
|
|
|
const requestLink = new ApolloLink(
|
|
(operation, forward) =>
|
|
new Observable((observer: any) => {
|
|
let handle: any;
|
|
Promise.resolve(operation)
|
|
.then((op: any) => {
|
|
const accessToken = getAccessToken();
|
|
if (accessToken) {
|
|
op.setContext({
|
|
headers: {
|
|
Authorization: `Bearer ${accessToken}`,
|
|
},
|
|
});
|
|
}
|
|
})
|
|
.then(() => {
|
|
handle = forward(operation).subscribe({
|
|
next: observer.next.bind(observer),
|
|
error: observer.error.bind(observer),
|
|
complete: observer.complete.bind(observer),
|
|
});
|
|
})
|
|
.catch(observer.error.bind(observer));
|
|
|
|
return () => {
|
|
if (handle) {
|
|
handle.unsubscribe();
|
|
}
|
|
};
|
|
}),
|
|
);
|
|
|
|
const client = new ApolloClient({
|
|
link: ApolloLink.from([
|
|
onError(({ graphQLErrors, networkError }) => {
|
|
if (graphQLErrors) {
|
|
graphQLErrors.forEach(({ message, locations, path }) =>
|
|
console.log(`[GraphQL error]: Message: ${message}, Location: ${locations}, Path: ${path}`),
|
|
);
|
|
}
|
|
if (networkError) {
|
|
console.log(`[Network error]: ${networkError}`);
|
|
}
|
|
}),
|
|
errorLink,
|
|
requestLink,
|
|
new HttpLink({
|
|
uri: '/graphql',
|
|
credentials: 'same-origin',
|
|
}),
|
|
]),
|
|
cache,
|
|
});
|
|
|
|
ReactDOM.render(
|
|
<ApolloProvider client={client}>
|
|
<App />
|
|
</ApolloProvider>,
|
|
document.getElementById('root'),
|
|
);
|