conditionally render route about graphiql-rails HOT 6 CLOSED

Rails.configuration.to_prepare do
  GraphiQL::Rails::EditorsController.class_eval do
    before_action :authenticate_user!
  end 
end

GraphiQL::Rails::EditorsController.class_eval do
  before_action :authenticate_user!
end

# config/initializers/graphiql.rb

# Only enable these in development, GraphiQL isn't enabled in production.
if Rails.env.development?
  GraphiQL::Rails.config.headers['X-GraphiQL-Request'] = ->(_context) { "true" }
end

# app/controllers/graphql_controller.rb

context = {
  current_user: current_user || doorkeeper_user,
  doorkeeper_scopes: doorkeeper_token&.scopes&.to_a,
  graphiql_override: false
}

# Set graphiql_override to true if in development mode and the request
# has the GraphiQL Request header. This is used to allow GraphiQL
# requests to skip the Doorkeeper token checks.
context[:graphiql_override] = true if Rails.env.development? && request.headers['X-GraphiQL-Request'] == 'true'

# app/graphql/types/base_object.rb

def self.authorized?(_object, context)
  raise GraphQL::ExecutionError, "You must be logged in to use the API." if context[:current_user].nil?

  if !context[:doorkeeper_scopes]&.include?('read') && !context[:graphiql_override]
    raise GraphQL::ExecutionError, "Your token must have the 'read' scope to perform a query." 
  end

  return true
end

# app/graphql/mutations/base_mutation.rb

def ready?(**_args)
  raise GraphQL::ExecutionError, "Your token must have the 'write' scope to perform a mutation." if !context[:doorkeeper_scopes]&.include?('write') && !context[:graphiql_override]

  return true
end