Passwords are stored in clear locally (no hash) about graphcool-templates HOT 2 CLOSED

mutation {
  signupUser(email: "[email protected]", password: "MySecretPassword") {
    token
  }
}

graphcool init

graphcool-framework add-template auth/email-password

type User @model {
  id: ID! @isUnique # read-only (managed by Graphcool)

  createdAt: DateTime! # read-only (managed by Graphcool)
  updatedAt: DateTime! # read-only (managed by Graphcool)

  email: String! @isUnique
  password: String!
}

types: ./types.graphql

functions:
  signup:
    type: resolver
    schema: src/email-password/signup.graphql
    handler:
      code: src/email-password/signup.ts

  authenticate:
    type: resolver
    schema: src/email-password/authenticate.graphql
    handler:
      code: src/email-password/authenticate.ts

  loggedInUser:
    type: resolver
    schema: src/email-password/loggedInUser.graphql
    handler:
      code: src/email-password/loggedInUser.ts

  hello:
    handler:
      code: src/hello.js
    type: resolver
    schema: src/hello.graphql

permissions:
  - operation: "*"

graphcool deploy

mutation {
  createUser (email: "[email protected]", password: "MySecretPassword") {
    id
  }
}

query {
  allUsers {
    id
    email
    password
  }
}

{
  "data": {
    "allUsers": [
      {
        "id": "cjlr396u51c0l0138gllo608y",
        "email": "[email protected]",
        "password": "MySecretPassword"
      }
    ]
  }
}

mutation {
  authenticateUser (email: "[email protected]", password: "MySecretPassword") {
    token
  }
}

{
  "data": {
    "authenticateUser": null
  },
  "errors": [
    {
      "locations": [
        {
          "line": 2,
          "column": 3
        }
      ],
      "functionError": "Invalid credentials!",
      "path": [
        "authenticateUser"
      ],
      "code": 5001,
      "message": "function execution error: Invalid credentials!",
      "requestId": "eu-west-1:simple:cjlr3apz512gc01392k8afi0n"
    }
  ]
}