How to get a status code 401 when not authorized about authorization HOT 6 CLOSED

@john-roland, you might be interested in reading this for extra background

graphql-dotnet/server#159

from authorization.

I wrote my own ASP.NET middleware to process GraphQL requests, and one of the things it does is validate the JWT token passed in and return a 401 response code if it is invalid - prior to calling the document executer (which does validation). Sorry, not sure how that answer helps if you're using this authorization library.

from authorization.

@Shane32 , I wrote a custom middleware piggybacking everything, the magic sauce is here

        private Task WriteResponseAsync(HttpContext context, IDocumentWriter writer, ExecutionResult result, int statusCode = 200)
        {
            var json = writer.Write(result);

            statusCode = result.Errors?.Any() != true
                ? (int)HttpStatusCode.OK
                : result.Errors?.Any(er => (er as ValidationError)?.Code == "authorization") == true
                    ? (int)HttpStatusCode.Unauthorized
                    : (int)HttpStatusCode.BadRequest;

            result.Errors?.ToList().ForEach(e => _logger.LogError($"GraphQL execution error: {e}"));

            context.Response.ContentType = "application/json";
            context.Response.StatusCode = statusCode;

            return context.Response.WriteAsync(json);
        }

UPD: that was long ago, I'm not sure if APIs are now compatible, but you get the idea

from authorization.

Is there's a way to get a 401 status code instead of a 200 + the graphql message (when the authentication is not ok) ?

Of course. Authorize user before handling graphql request. 401/200/xxx - these all are HTTP transport codes. GraphQL as it is has nothing to do with HTTP transport layer.

from authorization.

Closed due lack of feedback.

from authorization.

sorry for being silent, thank you all for your answers, I've done a bit like you've said, interrupting the request before the graphql processing

from authorization.