graphql-anonym-directives v1.0.2

graphql-anonym-directives

This package provides special SchemaDirectiveVisitor classes. Those can be added to schemas: https://www.apollographql.com/docs/apollo-server/schema/directives/

Usage

Installation

npm install graphql-anonym-directives

Requirements

The anonymization directives use JWT tokens to extract to role of the current requester. Therefore, you must provide the JWT secret as environment variable.

JWT_SECRET=qwertyuiopasdfghjklzxcvbnm123456

It can be loaded with the dotenv package in you index.js:

const dotenv = require("dotenv");
dotenv.config();

Also the context, that is passed as argument for each resolver call needs to store the token passed by the request. This can be done when creating the Apollo server (the argument req consists of the request information):

const server = new ApolloServer({
    typeDefs,
    resolvers,
    context: ({req}) => {
        return {req}
    } 
})

To use the anonymization directives, you need to import them and declare the getAnonymizationParameter function. This function must return the paramters, which then are passed by the directive to the anonymizer function (to learn more, look here for the anonymizer: ). As arguments, it gets the role and all 4 arguments (result, args, context, info), that are also passed to the resolvers.

Don't forget to add the directive as argument when creating the apollo server.

A whole implementation could look like this:

import {NoiseDirective} from "graphql-access-control";
NoiseDirective.prototype.getAnonymizationParameter = function(role, result, args, context, info){
    const m = new Map();
    m.set(("Advertiser, Symptom.pain"), {
        typeOfDistribution: "normal", 
        distributionParameters:{
            mean: 0,
            standardDeviation: 2,
        }, 
        valueParameters:{
            isInt: true,
        }
    });    

    var lookup = role + ", " + info.parentType.name + "."+ info.fieldName
    return m.get(lookup);
};

const server = new ApolloServer({
    typeDefs,
    resolvers,
    context: ({req}) => {
        return {req, models}
    },
    schemaDirectives: { 
        noise: NoiseDirective,
    }, 
});

The schema then could implement the noise directive:

type Symptom{
    id: ID!
    pain: Float @noise
}