跳转至主要内容

Graphql-中间件

Casbin follows the officially suggested way to provide authorization for GraphQL endpoints by having a single source of truth for authorization: https://graphql.org/learn/authorization/. In other words, Casbin should be placed between the GraphQL layer and your business logic.

// Casbin授权逻辑位于postRepository内
var postRepository = require('postRepository');

var postType = new GraphQLObjectType({
  name: 'Post',
  fields: {
    body: {
      type: GraphQLString,
      resolve: (post, args, context, { rootValue }) => {
        return postRepository.getBody(context.user, post);
      }
    }
  }
});

Supported GraphQL Middlewares​

A complete list of Casbin GraphQL middlewares is provided below. Any third-party contributions on a new GraphQL middleware are welcomed. Please inform us, and we will add it to this list:)

中间件GraphQL 实现作者描述
graphql-authzgraphqlCasbin用于graphql-go 的授权中间件
graphql-casbingraphql@esmaeilpourAn implementation of using Graphql and Casbin together
gqlgen_casbin_RBAC_examplegqlgen@WenyXu(empty)