1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
# frozen_string_literal: true
require "graphql/analysis/ast/visitor"
require "graphql/analysis/ast/analyzer"
require "graphql/analysis/ast/field_usage"
require "graphql/analysis/ast/query_complexity"
require "graphql/analysis/ast/max_query_complexity"
require "graphql/analysis/ast/query_depth"
require "graphql/analysis/ast/max_query_depth"
require "timeout"
module GraphQL
module Analysis
module AST
module_function
# Analyze a multiplex, and all queries within.
# Multiplex analyzers are ran for all queries, keeping state.
# Query analyzers are ran per query, without carrying state between queries.
#
# @param multiplex [GraphQL::Execution::Multiplex]
# @param analyzers [Array<GraphQL::Analysis::AST::Analyzer>]
# @return [Array<Any>] Results from multiplex analyzers
def analyze_multiplex(multiplex, analyzers)
multiplex_analyzers = analyzers.map { |analyzer| analyzer.new(multiplex) }
multiplex.current_trace.analyze_multiplex(multiplex: multiplex) do
query_results = multiplex.queries.map do |query|
if query.valid?
analyze_query(
query,
query.analyzers,
multiplex_analyzers: multiplex_analyzers
)
else
[]
end
end
multiplex_results = multiplex_analyzers.map(&:result)
multiplex_errors = analysis_errors(multiplex_results)
multiplex.queries.each_with_index do |query, idx|
query.analysis_errors = multiplex_errors + analysis_errors(query_results[idx])
end
multiplex_results
end
end
# @param query [GraphQL::Query]
# @param analyzers [Array<GraphQL::Analysis::AST::Analyzer>]
# @return [Array<Any>] Results from those analyzers
def analyze_query(query, analyzers, multiplex_analyzers: [])
query.current_trace.analyze_query(query: query) do
query_analyzers = analyzers
.map { |analyzer| analyzer.new(query) }
.tap { _1.select!(&:analyze?) }
analyzers_to_run = query_analyzers + multiplex_analyzers
if analyzers_to_run.any?
analyzers_to_run.select!(&:visit?)
if analyzers_to_run.any?
visitor = GraphQL::Analysis::AST::Visitor.new(
query: query,
analyzers: analyzers_to_run
)
# `nil` or `0` causes no timeout
Timeout::timeout(query.validate_timeout_remaining) do
visitor.visit
end
if visitor.rescued_errors.any?
return visitor.rescued_errors
end
end
query_analyzers.map(&:result)
else
[]
end
end
rescue Timeout::Error
[GraphQL::AnalysisError.new("Timeout on validation of query")]
rescue GraphQL::UnauthorizedError
# This error was raised during analysis and will be returned the client before execution
[]
end
def analysis_errors(results)
results.flatten.tap { _1.select! { |r| r.is_a?(GraphQL::AnalysisError) } }
end
end
end
end
|
