@envelop/extended-validation

7.1.1

Patch Changes

Updated dependencies [0bfde27]:
- @envelop/core@5.5.1

7.1.0

Patch Changes

#2827 dc2327d Thanks @renovate ! - dependencies updates:
- Updated dependency @graphql-tools/utils@^11.0.0 ↗︎ (from ^10.0.0, in dependencies)
Updated dependencies [d3d83bc]:
- @envelop/core@5.5.0

7.0.0

Patch Changes

Updated dependencies [0434fbd]:
- @envelop/core@5.4.0

6.1.0

Minor Changes

#2742 62a8915 Thanks @enisdenjo ! - Introduce new option onDocument

It’s a callback that is invoked when the document is assembled by the visitor.

6.0.0

Patch Changes

Updated dependencies [3ebaa3b]:
- @envelop/core@5.3.0

5.1.3

Patch Changes

Updated dependencies [914f9ed, 914f9ed]:
- @envelop/core@5.2.3

5.1.2

Patch Changes

Updated dependencies [26137e7, 26137e7]:
- @envelop/core@5.2.2

5.1.1

Patch Changes

Updated dependencies [90dd1a6, 90dd1a6]:
- @envelop/core@5.2.1

5.1.0

Patch Changes

Updated dependencies [a107c89, a107c89]:
- @envelop/core@5.2.0

5.0.1

Patch Changes

Updated dependencies [5b6a166]:
- @envelop/core@5.1.1

5.0.0

Patch Changes

Updated dependencies [9bd1b20]:
- @envelop/core@5.1.0

4.1.0

Minor Changes

#2281 70d4d7a Thanks @UserType; ! - Refactor Generic Auth plugin;

[BREAKING] - Now @auth directive is renamed to @authenticated. If you want to keep the old name you can configure the plugin to use the old name.


useGenericAuth({
  // ...
  authDirectiveName: 'auth'
})

[BREAKING] - Now directiveOrExtensionFieldName is renamed to authDirectiveName.


useGenericAuth({
  // ...
- directiveOrExtensionFieldName: 'auth',
+ authDirectiveName: 'auth',
});

Now auth directives support OBJECT and INTERFACE locations, so you can use the auth directive on types as well.


directive @authenticated on OBJECT | INTERFACE
 
type User @authenticated {
  id: ID!
  name: String!
}

validateUser function does not receive fieldAuthDirectiveNode and fieldAuthExtension anymore. Instead, it takes fieldAuthArgs which is an object that contains the arguments of the auth directive or extension. So you don’t need to parse the arguments manually anymore.


const validateUser: ValidateUserFn = params => {
  if (!params.fieldAuthArgs.roles.includes('admin')) {
    return createUnauthorizedError(params)
  }
}

validateUser’s objectType parameter is now renamed to parentType. And it takes the original composite type instead of the GraphQLObjectType instance. Now it can be GraphQLInterfaceType as well.
validateUser’s current parameters are now;


export type ValidateUserFnParams<UserType> = {
  /** The user object. */
 
  /** The field node from the operation that is being validated. */
  fieldNode: FieldNode
  /** The parent type which has the field that is being validated. */
  parentType: GraphQLObjectType | GraphQLInterfaceType
  /** The auth directive arguments for the type */
  typeAuthArgs?: Record<string, any>
  /** The directives for the type */
  typeDirectives?: ReturnType<typeof getDirectiveExtensions>
  /** Scopes that type requires */
  typeScopes?: string[][]
  /** Policies that type requires */
  typePolicies?: string[][]
  /** The object field */
  field: GraphQLField<any, any>
  /** The auth directive arguments for the field */
  fieldAuthArgs?: Record<string, any>
  /** The directives for the field */
  fieldDirectives?: ReturnType<typeof getDirectiveExtensions>
  /** Scopes that field requires */
  fieldScopes?: string[][]
  /** Policies that field requires */
  fieldPolicies?: string[][]
  /** Extracted scopes from the user object */
  userScopes: string[]
  /** Policies for the user */
  userPolicies: string[]
  /** The args passed to the execution function (including operation context and variables) **/
  executionArgs: ExecutionArgs
  /** Resolve path */
  path: ReadonlyArray<string | number>
}

New directives for role-based auth are added @requiresScopes and @policy for more granular control over the auth logic.


directive @requiresScopes(scopes: [String!]!) on OBJECT | INTERFACE | FIELD_DEFINITION
 
directive @policy(policy: String!) on OBJECT | INTERFACE | FIELD_DEFINITION

Check README for more information.

4.0.0

Major Changes

#1986 68e7a2a5 Thanks @EmrysMyrddin ! - Breaking Change: Support of Node 16 is dropped.
Updated dependencies [68e7a2a5, f7ef03c0]:
- @envelop/core@5.0.0

3.0.3

Patch Changes

#1927 e3c90116 Thanks @renovate ! - dependencies updates:
- Updated dependency @envelop/core@^4.0.2 ↗︎ (from ^4.0.1, in peerDependencies)
Updated dependencies [dee6b8d2]:
- @envelop/core@4.0.3

3.0.2

Patch Changes

Updated dependencies [db20864a]:
- @envelop/core@4.0.2

3.0.1

Patch Changes

Updated dependencies []:
- @envelop/core@4.0.1

3.0.0

Major Changes

#1776 332f1f22 Thanks @ardatan ! - Drop Node 14 and require Node 16 or higher
Updated dependencies [332f1f22, a36925c7]:
- @envelop/core@4.0.0

Patch Changes

#1776 332f1f22 Thanks @ardatan ! - dependencies updates:
- Updated dependency @graphql-tools/utils@^10.0.0 ↗︎ (from ^8.8.0, in dependencies)

2.0.6

Patch Changes

#1725 c1eb2c09 Thanks @n1ru4l ! - dependencies updates:
- Updated dependency tslib@^2.5.0 ↗︎ (from ^2.4.0, in dependencies)
Updated dependencies [c1eb2c09]:
- @envelop/core@3.0.6

2.0.5

Patch Changes

Updated dependencies [270249cf]:
- @envelop/core@3.0.5

2.0.4

Patch Changes

Updated dependencies []:
- @envelop/core@3.0.4

2.0.3

Patch Changes

Updated dependencies [6b48ef96]:
- @envelop/core@3.0.3

2.0.2

Patch Changes

Updated dependencies [22f5ccfb]:
- @envelop/core@3.0.2

2.0.0

Major Changes

Updated dependencies [dc1e24b5, dc1e24b5, dc1e24b5, dc1e24b5, dc1e24b5, dc1e24b5, dc1e24b5, dc1e24b5, dc1e24b5, dc1e24b5, dc1e24b5, dc1e24b5, dc1e24b5, dc1e24b5]:
- @envelop/core@3.0.0

1.9.0

Minor Changes

#1499 1f7af02b Thanks @viniciuspalma ! - Adding tslib to package dependencies

Projects that currently are using yarn Berry with PnP or any strict dependency resolver, that requires that all dependencies are specified on package.json otherwise it would endue in an error if not treated correct

Since https://www.typescriptlang.org/tsconfig#importHelpers is currently being used, tslib should be exported as a dependency to external runners get the proper import.

Change on each package:
```
// package.json
{
  "dependencies": {
    "tslib": "^2.4.0"
  }
}
```
Updated dependencies [1f7af02b, ae7bc9a3]:
- @envelop/core@2.6.0

1.8.0

Minor Changes

Updated dependencies [5a5f5c04, d828f129]:
- @envelop/core@2.5.0

1.7.2

Patch Changes

071f946: Fix CommonJS TypeScript resolution with moduleResolution node16 or nodenext
Updated dependencies [071f946]
- @envelop/core@2.4.2

1.7.1

Patch Changes

Updated dependencies [787d28a2]
- @envelop/core@2.4.1

1.7.0

Minor Changes

8bb2738: Support TypeScript module resolution.
Updated dependencies [8bb2738]
- @envelop/core@2.4.0

1.6.3

Patch Changes

fbf6155: update package.json repository links to point to the new home
Updated dependencies [fbf6155]
- @envelop/core@2.3.3

1.6.2

Patch Changes

Updated dependencies [07d029b]
- @envelop/core@2.3.2

1.6.1

Patch Changes

Updated dependencies [d5c2c9a]
- @envelop/core@2.3.1

1.6.0

Minor Changes

Updated dependencies [af23408]
- @envelop/core@2.3.0

1.5.0

Minor Changes

Updated dependencies [ada7fb0]
Updated dependencies [d5115b4]
Updated dependencies [d5115b4]
- @envelop/core@2.2.0

1.4.1

Patch Changes

01c8dd6: fix handling of array input (list)

1.4.0

Minor Changes

Updated dependencies [78b3db2]
Updated dependencies [f5eb436]
- @envelop/core@2.1.0

Patch Changes

78b3db2: Run extended validation phase for subscription operations.
8030244: Ensure the extended validation phase only runs once.

Move shared extended validation rules context instantiation to the onContextFactory phase and raise an error when execute is invoked without building and passing the contextValue returned from contextFactory.

1.3.4

Patch Changes

f102d38: move @envelop/core dependency to peerDependencies

1.3.3

Patch Changes

Updated dependencies [4106e08]
Updated dependencies [aac65ef]
Updated dependencies [4106e08]
- @envelop/core@2.0.0

1.3.2

Patch Changes

3dfddb5: Bump graphql-tools/utils to v8.6.1 to address a bug in getArgumentsValues
Updated dependencies [3dfddb5]
- @envelop/core@1.7.1

1.3.1

Patch Changes

b1a0331: Properly list @envelop/core as a peerDependency in plugins.

This resolves issues where the bundled envelop plugins published to npm had logic inlined from the @envelop/core package, causing instanceof check of EnvelopError to fail.
07c39b5: Simplify code and add comments to the code.
Updated dependencies [b1a0331]
- @envelop/core@1.6.1

1.3.0

Minor Changes

090cae4: GraphQL v16 support

1.2.0

Minor Changes

04120de: add support for GraphQL.js 16

Patch Changes

a0b2da3: Fix handling of introspection queries and disallow authorization bypassing. Previously, it was possible to bypass authorization by adding \_\_schema to query

1.1.1

Patch Changes

422a6c6: fix ESM

1.1.0

Minor Changes

7c897ae: Added onValidationFailed callback

1.0.0

Major Changes

40bc444: v1 major release for envelop packages

0.2.2

Patch Changes

28ad742: Improve TypeScript types

0.2.1

Patch Changes

7fd2f7b: suuport multiple usages of useExtendedValidation

0.2.0

Minor Changes

eb6f53b: ESM Support for all plugins and envelop core

0.1.2

Patch Changes

25bfb47: fix issue with inlining graphql.js code in published bundle

0.1.1

Patch Changes

d4fcb9e: Support oneOf validation for input object type fields.

Correctly handle validation of lists of oneOf input types and input type fields that are of a nullable oneOf input type.