DGNum/demarches-normaliennes
13
1
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

feat(api_token): api v2 use new token

Browse source
This commit is contained in:
Paul Chavard 2022-11-30 10:14:23 +01:00
parent a47a056ee8
commit 52c8fc7e8d
4 changed files with 27 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

12
app/graphql/api/v2/context.rb
View file

@ -23,15 +23,11 @@ class API::V2::Context < GraphQL::Query::Context
# We are caching authorization logic because it is called for each node
# of the requested graph and can be expensive. Context is reset per request so it is safe.
self[:authorized] ||= Hash.new do |hash, demarche_id|
# Compute the hash value dynamically when first requested
authorized_administrateur = demarche.administrateurs.find do |administrateur|
if self[:token]
administrateur.valid_api_token?(self[:token])
else
administrateur.id == self[:administrateur_id]
end
hash[demarche_id] = if self[:token]
APIToken.find_and_verify(self[:token], demarche.administrateurs).present?
elsif self[:administrateur_id]
demarche.administrateurs.map(&:id).include?(self[:administrateur_id])
end
hash[demarche_id] = authorized_administrateur.present?
end
self[:authorized][demarche.id]