photowall/graphql-api-js
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

3010: Apollo 4 major update and complete security overhaul to prepare for public api support

Browse Source 
* 2919: rewrite for update to apollo 4 (#131)

* rewrite for update to apollo 4

* removed container tests, edited make to publish any branch to staging

* revert makefile

* cleanup

* update 1

* more fixes to get it working on aws

* enabled csrf prevention protection, testing if build works

* switched to express version

* changed the healthcheck url

* added cache to restdatasources

* 3011: create a login mutation on graphql server that responds with a access token (#133)

* 3011 added login rest endpoint and general scope fixes

* changed login auth to basic auth username and password

* minor changes from CR feedback

* force update

* added tighter timeout for idle knex connection

* Refactor authentication and scopes (#134)

* big refactor of scopes in graphql

* cr fixes

* some security fixes (#135)

* some security fixes

* cleanup

* update staging

* minor readme change
This commit is contained in:
Arwid Thornström
2022-12-12 12:58:24 +01:00
committed by GitHub
parent 4248465031
commit c68c182b64
78 changed files with 3783 additions and 14606 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cloudformation/ecs-service.yaml
+11 -1
View File
@@ -52,7 +52,7 @@ Parameters:
Default: 443
HealthCheckPath:
Type: String
Default: /.well-known/apollo/server-health
Default: /health
Certificate:
Type: String
@@ -134,6 +134,16 @@ Resources:
ValueFrom: !Sub 'arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/${EnvironmentName}/graphql-api/DATABASE_URL'
- Name: 'COGNITO_POOL_ID'
ValueFrom: !Sub 'arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/${EnvironmentName}/cognito/ADMIN_POOL_ID'
- Name: 'COGNITO_LOGIN_CLIENT_ID'
ValueFrom: !Sub 'arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/${EnvironmentName}/cognito/GRAPHQL_WEB_CLIENT_ID'
- Name: 'COGNITO_LOGIN_CLIENT_SECRET'
ValueFrom: !Sub 'arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/${EnvironmentName}/cognito/GRAPHQL_WEB_CLIENT_SECRET'
- Name: 'COGNITO_LOGIN_CLIENT_URL'
ValueFrom: !Sub 'arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/${EnvironmentName}/cognito/GRAPHQL_AUTH_URL'
- Name: 'WEB_CLIENT_USERNAME'
ValueFrom: !Sub 'arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/${EnvironmentName}/GRAPHQL_WEB_CLIENT_USERNAME'
- Name: 'WEB_CLIENT_PASSWORD'
ValueFrom: !Sub 'arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/${EnvironmentName}/GRAPHQL_WEB_CLIENT_PASSWORD'
- Name: 'INTERIORS_URL'
ValueFrom: !Sub 'arn:aws:ssm:${AWS::Region}:${AWS::AccountId}:parameter/${EnvironmentName}/INTERIORS_URL'
- Name: 'INTERIORS_TOKEN'