We could not synchronize checks via GitHub's checks API since Scrutinizer's GitHub App is not installed for this repository.
1 | <?php |
||
15 | class AccessResolver |
||
16 | { |
||
17 | /** @var PromiseAdapter */ |
||
18 | private $promiseAdapter; |
||
19 | |||
20 | 94 | public function __construct(PromiseAdapter $promiseAdapter) |
|
24 | |||
25 | 12 | public function resolve(callable $accessChecker, callable $resolveCallback, array $resolveArgs = [], $useStrictAccess = false) |
|
26 | { |
||
27 | 12 | if ($useStrictAccess || self::isMutationRootField($resolveArgs[3])) { |
|
28 | 11 | return $this->checkAccessForStrictMode($accessChecker, $resolveCallback, $resolveArgs); |
|
29 | } |
||
30 | |||
31 | 4 | $result = \call_user_func_array($resolveCallback, $resolveArgs); |
|
32 | |||
33 | 4 | if ($result instanceof Promise) { |
|
34 | 1 | $result = $result->adoptedPromise; |
|
35 | } |
||
36 | |||
37 | 4 | if ($this->promiseAdapter->isThenable($result) || $result instanceof SyncPromise) { |
|
38 | 1 | return $this->promiseAdapter->then( |
|
39 | 1 | new Promise($result, $this->promiseAdapter), |
|
40 | function ($result) use ($accessChecker, $resolveArgs) { |
||
41 | 1 | return $this->processFilter($result, $accessChecker, $resolveArgs); |
|
42 | 1 | } |
|
43 | ); |
||
44 | } |
||
45 | |||
46 | 3 | return $this->processFilter($result, $accessChecker, $resolveArgs); |
|
47 | } |
||
48 | |||
49 | 9 | private static function isMutationRootField(ResolveInfo $info) |
|
50 | { |
||
51 | 9 | return 'mutation' === $info->operation->operation && $info->parentType === $info->schema->getMutationType(); |
|
52 | } |
||
53 | |||
54 | 11 | private function checkAccessForStrictMode(callable $accessChecker, callable $resolveCallback, array $resolveArgs = []) |
|
55 | { |
||
56 | 11 | if (!$this->hasAccess($accessChecker, $resolveArgs)) { |
|
57 | 5 | $exceptionClassName = self::isMutationRootField($resolveArgs[3]) ? UserError::class : UserWarning::class; |
|
58 | 5 | throw new $exceptionClassName('Access denied to this field.'); |
|
59 | } |
||
60 | |||
61 | 6 | return \call_user_func_array($resolveCallback, $resolveArgs); |
|
62 | } |
||
63 | |||
64 | 4 | private function processFilter($result, $accessChecker, $resolveArgs) |
|
65 | { |
||
66 | /** @var ResolveInfo $resolveInfo */ |
||
67 | 4 | $resolveInfo = $resolveArgs[3]; |
|
68 | |||
69 | 4 | if (self::isIterable($result) && $resolveInfo->returnType instanceof ListOfType) { |
|
70 | 1 | foreach ($result as $i => $object) { |
|
71 | 1 | $result[$i] = $this->hasAccess($accessChecker, $resolveArgs, $object) ? $object : null; |
|
72 | } |
||
73 | 3 | } elseif ($result instanceof Connection) { |
|
74 | 1 | $result->edges = \array_map( |
|
75 | function (Edge $edge) use ($accessChecker, $resolveArgs) { |
||
76 | 1 | $edge->node = $this->hasAccess($accessChecker, $resolveArgs, $edge->node) ? $edge->node : null; |
|
77 | |||
78 | 1 | return $edge; |
|
79 | 1 | }, |
|
80 | 1 | $result->edges |
|
81 | ); |
||
82 | 2 | } elseif (!$this->hasAccess($accessChecker, $resolveArgs, $result)) { |
|
83 | 1 | throw new UserWarning('Access denied to this field.'); |
|
84 | } |
||
85 | |||
86 | 3 | return $result; |
|
87 | } |
||
88 | |||
89 | 12 | private function hasAccess(callable $accessChecker, array $resolveArgs = [], $object = null) |
|
96 | |||
97 | /** |
||
98 | * @param mixed $data |
||
99 | * |
||
100 | * @return bool |
||
101 | */ |
||
102 | 4 | private static function isIterable($data) |
|
110 | } |
||
111 |