Joe NelsonandGitHub
1d5a0e4316
* WIP: remove non-openapi root spec * Refactor ContentType Different endpoints will favor one type over another * Permit different Accept headers per endpoint * Lint * Add charset to Content-Type only when used as a header Keep it out of error messages * Accept: */* is last resort, not first * Changelog * makeMimeList consistently * Remove schema description from OPTIONS response
44 lines
1.7 KiB
Haskell
44 lines
1.7 KiB
Haskell
{-# OPTIONS_GHC -fno-warn-orphans #-}
|
|
{-# LANGUAGE ScopedTypeVariables #-}
|
|
|
|
module PostgREST.Middleware where
|
|
|
|
import Data.Aeson (Value (..))
|
|
import qualified Data.HashMap.Strict as M
|
|
import Data.String.Conversions (cs)
|
|
import qualified Hasql.Transaction as H
|
|
|
|
import Network.HTTP.Types.Status (status400)
|
|
import Network.Wai (Application, Response)
|
|
import Network.Wai.Middleware.Cors (cors)
|
|
import Network.Wai.Middleware.Gzip (def, gzip)
|
|
import Network.Wai.Middleware.Static (only, staticPolicy)
|
|
|
|
import PostgREST.ApiRequest (ApiRequest(..))
|
|
import PostgREST.Auth (claimsToSQL)
|
|
import PostgREST.Config (AppConfig (..), corsPolicy)
|
|
import PostgREST.Error (errResponse)
|
|
import Data.Text
|
|
|
|
import Protolude hiding (concat, null)
|
|
|
|
runWithClaims :: AppConfig -> Either Text (M.HashMap Text Value) ->
|
|
(ApiRequest -> H.Transaction Response) ->
|
|
ApiRequest -> H.Transaction Response
|
|
runWithClaims conf eClaims app req =
|
|
case eClaims of
|
|
Left e -> clientErr e
|
|
Right claims -> do
|
|
-- role claim defaults to anon if not specified in jwt
|
|
H.sql . mconcat . claimsToSQL $ M.union claims (M.singleton "role" anon)
|
|
app req
|
|
where
|
|
anon = String . cs $ configAnonRole conf
|
|
clientErr = return . errResponse status400
|
|
|
|
defaultMiddle :: Application -> Application
|
|
defaultMiddle =
|
|
gzip def
|
|
. cors corsPolicy
|
|
. staticPolicy (only [("favicon.ico", "static/favicon.ico")])
|