Any idea how a flask users use graphql-jwt ? about django-graphql-jwt

[mongkok]

Hi @kavink,

I have not seen similar projects for Flask and Graphene but there is a Flask library that could be a perfect toolkit to make it yourself.
https://github.com/vimalloc/flask-jwt-extended

flask-jwt-extended has functions to develop all mutations included in Django-graphql-jwt.

• tokenAuth(username, password): create_access_token()
• verifyToken(token): get_jwt_identity()
• refreshToken(token): create_refresh_token()

and you could use the @jwt_required decorator to limit access to data.

import graphene
import graphene_sqlalchemy
from flask_jwt_extended import current_user, jwt_required


class UserType(graphene_sqlalchemy.SQLAlchemyObjectType):

    class Meta:
        model = UserModel


class Query(graphene.ObjectType):
    viewer = graphene.Field(UserType)
    users = graphene.List(UserType)

    @jwt_required
    def resolve_viewer(self, info, **kwargs):
        return current_user

    @jwt_required
    # TODO: @superuser_required
    def resolve_users(self, info, **kwargs):
        return info.context['session'].query(UserModel).all()


class UpdateUser(graphene.Mutation):
    user = graphene.Field(UserType)

    class Arguments:
        email = graphene.String()

    @classmethod
    @jwt_required
    def mutate(cls, root, info, email):
        # TODO: update current_user
        return cls(user=current_user)

[danielkolesnik]

Alternatively to limit access to data some can use a middleware and validate token on your own. In this way you don't need to decorate all of your resolvers with jwt_required

from flask_jwt_extended import verify_jwt_in_request

class AuthMiddleware(object):
    def resolve(self, next, root, info, **kwargs):
        # This will only be called once for a request
        if root is None:
            # verify jwt if requested resource is not public
            if info.field_name not in ['tokenAuth', 'verifyToken']:
                verify_jwt_in_request()

                return next(root, info, **kwargs)

        return next(root, info, **kwargs)

And then:

auth_middleware = AuthMiddleware()
app.add_url_rule("/graphql", view_func=GraphQLView.as_view(
    "graphql", 
    schema=schema, 
    graphiql=True, 
    middleware=[auth_middleware]
))

[gj1118]

@kavink - were you able to get it working with Flask - can you please provide me with an example code or point me to the correct direction , please ?

thank you

[hardntrash]

thx for answer. I tryed to use Flask-GraphQL-Auth, but your variant is best way.

Hi @kavink,

I have not seen similar projects for Flask and Graphene but there is a Flask library that could be a perfect toolkit to make it yourself.
https://github.com/vimalloc/flask-jwt-extended

flask-jwt-extended has functions to develop all mutations included in Django-graphql-jwt.

* `tokenAuth(username, password)`: [create_access_token()](http://flask-jwt-extended.readthedocs.io/en/latest/api.html#flask_jwt_extended.create_access_token)

* `verifyToken(token)`: [get_jwt_identity()](http://flask-jwt-extended.readthedocs.io/en/latest/api.html#flask_jwt_extended.get_jwt_identity)

* `refreshToken(token)`: [create_refresh_token()](http://flask-jwt-extended.readthedocs.io/en/latest/api.html#flask_jwt_extended.create_refresh_token)

and you could use the @jwt_required decorator to limit access to data.

import graphene
import graphene_sqlalchemy
from flask_jwt_extended import current_user, jwt_required


class UserType(graphene_sqlalchemy.SQLAlchemyObjectType):

    class Meta:
        model = UserModel


class Query(graphene.ObjectType):
    viewer = graphene.Field(UserType)
    users = graphene.List(UserType)

    @jwt_required
    def resolve_viewer(self, info, **kwargs):
        return current_user

    @jwt_required
    # TODO: @superuser_required
    def resolve_users(self, info, **kwargs):
        return info.context['session'].query(UserModel).all()


class UpdateUser(graphene.Mutation):
    user = graphene.Field(UserType)

    class Arguments:
        email = graphene.String()

    @classmethod
    @jwt_required
    def mutate(cls, root, info, email):
        # TODO: update current_user
        return cls(user=current_user)

[isakal]

This works beautifully, appreciate it