Merge pull request #2 from dulmandakh/isAuthenticated-directive

directives: isAuthenticed, isStaff

README.md

@@ -72,6 +72,30 @@ Above example will return following dict
 { "result": "result" }
 ```
 
+### isAuthenticated & isStaff directive
+
+A resolver will receive an authenticated user as keyword argument.
+
+```graphql
+directive @isAuthenticated on FIELD_DEFINITION
+
+type User {
+  id: ID
+  username: String
+  ipAddress: String @isAuthenticated
+}
+```
+
+```python
+from ariadne_django_ext import IsAuthenticatedDirective
+
+schema = make_executable_schema(
+  type_defs,
+  resolvers,
+  directives={"isAuthenticated": IsAuthenticatedDirective}
+)
+```
+
 ## Contributing
 
 Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
@@ -81,3 +105,7 @@ Please make sure to update tests as appropriate.
 ## License
 
 [MIT License](https://choosealicense.com/licenses/mit/)
+
+```
+
+```

ariadne_django_ext/__init__.py

@@ -1,4 +1,5 @@
 from .cache import cache
 from .decorators import wrap_result
+from .directives import IsAuthenticatedDirective, IsStaffDirective
 
-__all__ = ["cache", "wrap_result"]
+__all__ = ["cache", "wrap_result", "IsAuthenticatedDirective", "IsStaffDirective"]

ariadne_django_ext/directives.py

@@ -0,0 +1,33 @@
+from ariadne import SchemaDirectiveVisitor
+from graphql import default_field_resolver
+from django.core.exceptions import PermissionDenied
+
+
+class IsAuthenticatedDirective(SchemaDirectiveVisitor):
+    def visit_field_definition(self, field, _):
+        original_resolver = field.resolve or default_field_resolver
+
+        def resolve_for_authenticated_user(parent, info, **kwargs):
+            user = info.context["request"].user
+            if user and user.is_authenticated:
+                return original_resolver(parent, info, user=user, **kwargs)
+            else:
+                raise PermissionDenied()
+
+        field.resolve = resolve_for_authenticated_user
+        return field
+
+
+class IsStaffDirective(SchemaDirectiveVisitor):
+    def visit_field_definition(self, field, _):
+        original_resolver = field.resolve or default_field_resolver
+
+        def resolve_for_authenticated_user(parent, info, **kwargs):
+            user = info.context["request"].user
+            if user and user.is_authenticated and user.is_staff:
+                return original_resolver(parent, info, user=user, **kwargs)
+            else:
+                raise PermissionDenied()
+
+        field.resolve = resolve_for_authenticated_user
+        return field