https://stackoverflow.com/questions/6556522/authentication-versus-authorization

Reduce load between GraphQL Server & Mongodb

For example: Product have fields: a,b,c,d,e,f

Before:

• Client send request with to query products with fields a,b,c to GraphQL Server
• GraphQL Server send request to mongodb: products with all fields (a,b,c,d,e,f) [1]
• Mongodb return to GraphQL Server: products with all fields (a,b,c,d,e,f) [1]
• GraphQL Server response to Client: products with fields a, b, c

After

• [1] should be a,b,c instead of a,b,c,d,e,f
• Do not populate field that not in projection

Given:

• actionCode

When

• call function with arg: params: { actionCode }

Then

• Get expression filter + projection by actionCode by function checkPermission
• Return data with filter + projection

To increase flexibility

• choose between dbField & preprocess

Before

{
  product(id: 1) {
    _id
    name
    slug
  }
}

After

{
  product(id: 1) {
    entity {
      _id
      name
      slug
    }
    error
  }
}

return async (
obj: any,
args: { sort: string, page: number, limit: number, actionCode: string },
context,
info: any,
)

Given:

• actionCode

When

• call queryList with args: actionCode

Then

• Get expression filter + projection by actionCode by function checkPermission
• Return data with filter + projection