This repository holds a very basic implementation of (medium-like) authentication based on

• type-graphql
• typeorm
• Project structure and jest resolver testing is heavily inspired by Ben Awad type-graphql-series. Thanks!
• docker

Install docker on your machine.

Run in your cli:

$ cd typegraphql-typeorm-auth

# downloads docker images and installs npm packages inside backend container
$ docker-compose build 

# run it
$ docker-compose up    

# optional:
# install packages locally to enable lint and package autocompletion in vs code
$ cd backend 
$ npm install   
           

visit localhost/api/playground

• click on the settings icon top-right in playground and set "request.credentials": "same-origin",
• otherwise session cookies are not sent to the api

Run the following sequence of graphql queries and mutations to test:

First, we make sure that we don't have access to creating a todo:

mutation{
    createTodo(text:"foo")
}

this should output: "message": "accessDenied". Next, we create an account or request login to an already existing account by:

mutation{
    requestSignIn(user:{email:"[email protected]"})
}

look at your consol. You should see an output like:

backend_1  | sign in using this token:
backend_1  | 55dd4e34-b3ca-4da2-8edc-db5064ad9079

in production, the printed token is sent to the user via email. Run the following for a test sign-in

mutation{
    signIn(token:"55dd4e34-b3ca-4da2-8edc-db5064ad9079")
}

The server replies with a cookie. You can test the login status with:

query{
  loggedinUser{email}
}

or simply create a todo again;

mutation{
    createTodo(text:"foo")
}

followed by listing all todos of the logged-in user:

query{
    todos{text}
}

Check out react-yoga-mongo-nginx-docker to see how to connect a frontend container (with react) to the stack.

Resolvers can be tested using jest. You can see test implementations here:

• src/resolvers/Session.test.ts
• src/resolvers/Todo.test.js

You can run the tests with:

docker-compose run --rm backend npm test

All tests should pass without errors after a fresh clone of this repository.