🐛 fix: auth permissions

graphemy/models.py

@@ -121,7 +121,7 @@ def query(cls):
  async def field(
  self, info, filters: cls.filter | None = None
  ) -> list[cls.schema]:
- if not Setup.get_permission(folder, info):
+ if not await Setup.get_permission(folder, info.context):
  return []
  return await get_all(cls, filters)
 

graphemy/router.py

@@ -111,11 +111,11 @@ def __init__(
  )
 
  async def get_context(request: Request) -> dict:
- context = context_getter(request) if context_getter else {}
+ context = await context_getter(request) if context_getter else {}
  for n, f, m in functions:
  context[n] = MyDataLoader(
  load_fn=f
- if Setup.get_permission(m, context)
+ if await Setup.get_permission(m, context)
  else fake_dl_list
  if type(inspect.signature(f).return_annotation)
  == GenericAlias

graphemy/setup.py

@@ -18,16 +18,16 @@ def setup(cls, engine, folder=None, get_perm=None):
  cls.get_permission = get_perm
  else:
 
- def get_permission(module, context):
+ async def get_permission(module, context):
  return True
 
  cls.get_permission = get_permission
 
  @classmethod
  def get_auth(cls, module):
  class IsAuthenticated(BasePermission):
- def has_permission(self, source, info, **kwargs) -> bool:
- if not cls.get_permission(module, info):
+ async def has_permission(self, source, info, **kwargs) -> bool:
+ if not await cls.get_permission(module, info.context):
  info.context['response'].status_code = 403
  if not 'errors' in info.context['request'].scope:
  info.context['request'].scope['errors'] = [module]

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "graphemy"
-version = "0.1.3"
+version = "0.1.4"
 description = "A Python library for integrating SQLModel and Strawberry, providing a seamless GraphQL integration with FastAPI and advanced features for database interactions."
 authors = ["Matheus Doreto <[email protected]>"]
 readme = "README.md"

tests/test_permission.py

@@ -8,7 +8,7 @@ def client():
  from examples.tutorial.main import app, engine
  from graphemy import Setup
 
- def get_permission(module, context):
+ async def get_permission(module, context):
  return 'account' in module
 
  Setup.setup(engine=engine, get_perm=get_permission)