Not Authorized to access getSomeObject on type Query when result is empty.

Describe the bug Hello, seems like something changed in amplify or appsync not so long time ago. When I try to perform GraphQL query which returns empty result, now I have error:

Not Authorized to access getSomeObject on type Query 

There is code in resolver which leads to this behavior:

#if( !($isStaticGroupAuthorized == true || $isDynamicGroupAuthorized == true || $isOwnerAuthorized == true) )
  $util.unauthorized()
#end

Thats right code, but somehow previously when $ctx.result was empty I did not get this error.

The problem is that Apollo don’t cache query because error occurred.

This is wrong behavior, because if $ctx.result is NULL there should not be error

To Reproduce

1. amplify add auth
2. amplify add api with any schema with

@auth(rules: [{allow: owner, ownerField: "owner"}])

1. authenticate user
2. execute query getSomething(id) on where sure no data exists
3. See error

Expected behavior On empty result error is not necessary because no data returned.

Using

• amplify-cli@4.24.3
• react-native

[jwcarroll]

Just as an update, this appears to be fixed as of 4.27.3

I don’t know what version exactly this was fixed in, but a small change to the VTL templates can be seen now:

#if( $util.isNullOrEmpty($ctx.result) )
  #return
#end

Which… I’m still not sure is 100% accurate because that would seem to short certain authorization checks. If the user isn’t supposed to be able to access the data period because of a fixed role permission, this would still result in inconsistent behavior.

[realtomaszkula]

We are facing the same issue after updating from 4.24.1 to 4.25.0

Reverting to 4.24.1 and pushing fixed the issue.