demarches-normaliennes/app/controllers/api/v2/graphql_controller.rb
2023-04-18 15:22:11 +02:00

135 lines
3 KiB
Ruby

class API::V2::GraphqlController < API::V2::BaseController
def execute
result = API::V2::Schema.execute(query:, variables:, context:, operation_name:)
@query_info = result.context.query_info
render json: result
rescue GraphQL::ParseError, JSON::ParserError => exception
handle_parse_error(exception, :graphql_parse_failed)
rescue ArgumentError => exception
handle_parse_error(exception, :bad_request)
rescue => exception
if Rails.env.production?
handle_error_in_production(exception)
else
handle_error_in_development(exception)
end
end
private
def append_info_to_payload(payload)
# if on the graphql playground, authenticate via devise
# if authenticate by a v2 or v3 token
# @current_user is set by `api_v2_base_controller.authenticate_administrateur_from_token`
# else it is set on `context.authorized_demarche`
@current_user ||= Current.user
super
payload.merge!(@query_info.presence || {})
end
def process_action(*args)
super
rescue ActionDispatch::Http::Parameters::ParseError => exception
render json: {
errors: [
{
message: exception.cause.message,
extensions: {
code: :bad_request
}
}
],
data: nil
}, status: 400
end
def query
if params[:queryId].present?
API::V2::StoredQuery.get(params[:queryId])
else
params[:query]
end
end
def variables
ensure_hash(params[:variables])
end
def operation_name
params[:operationName]
end
# Handle form data, JSON body, or a blank value
def ensure_hash(ambiguous_param)
case ambiguous_param
when String
if ambiguous_param.present?
ensure_hash(JSON.parse(ambiguous_param))
else
{}
end
when Hash
ambiguous_param
when ActionController::Parameters
ambiguous_param.to_unsafe_h
when nil
{}
else
raise ArgumentError, "Unexpected parameter: #{ambiguous_param}"
end
end
def handle_parse_error(exception, code)
render json: {
errors: [
{
message: exception.message,
extensions: { code: }
}
],
data: nil
}, status: 400
end
def handle_error_in_development(exception)
logger.error exception.message
logger.error exception.backtrace.join("\n")
render json: {
errors: [
{
message: exception.message,
extensions: {
code: :internal_server_error,
backtrace: exception.backtrace
}
}
],
data: nil
}, status: 500
end
def handle_error_in_production(exception)
exception_id = SecureRandom.uuid
Sentry.with_scope do |scope|
scope.set_tags(exception_id:)
Sentry.capture_exception(exception)
end
render json: {
errors: [
{
message: "Internal Server Error",
extensions: {
code: :internal_server_error,
exception_id:
}
}
],
data: nil
}, status: 500
end
end