how to merge multi permission into one?

follow the README, we have to defined the big permission object like this:

const permissions = shield({
  Query: {
    frontPage: not(isAuthenticated),
    fruits: and(isAuthenticated, or(isAdmin, isEditor)),
    customers: and(isAuthenticated, isAdmin)
  },
  Mutation: {
    addFruitToBasket: isAuthenticated,
  },
  Fruit: isAuthenticated,
  Cusomer: isAdmin
})

could you give something like merge

const permissions = mergeShield({
    1Resolve,
    2Resolve,
    ...
});

[meebix]

@leonelpena and others who come across this issue… To accomplish what the OP and myself are looking to do, you can use a library called “assign-deep”. https://www.npmjs.com/package/assign-deep.

It merges the permissions together correctly allowing the following:

// file1.js
export default {
  Query: {
    getSecurityQuestions: allow,
  },
  SecurityQuestion: {
    shortName: allow,
  },
};

// file2.js
export default {
  Query: {
    getUser: allow,
  },
};

// permissionsArray is an array of the permissions above like...
// [{Query: {getSecurityQuestions: allow}}, {Query: {getUser: allow}}]

import assign from 'assign-deep';

const permissions = shield(assign(...permissionsArray), {
  debug: config.get('graphql.debug'),
  fallbackRule: deny,
  fallbackError: ApiError('UNAUTHORIZED'),
});

This produces the correct output that graphql-shield needs to operate.

[maticzav]

I have given a bit more thought to your problem. I am not sure this is your case, but here are two things that you can do.

1.

Because shield accepts a JSON object as an argument defining your schema, you could use Object.assign or ES6 merge syntax to merge your permissions into one.

// Query.allAuthStuffPermissions.ts
export const permissions = {
  login: noAuth,
  somethingElse: auth
}

// Query.somethingElseEquallyImportant.ts
export const permissions = {
  fruits: complexRule,
  vegies: simpleRule
}

// index.ts
import { permissions as permissions1 } from 'Query.allAuthStuffPermissions.ts'
import { permissions as permissions2 } from 'Query.somethingElseEquallyImportant.ts'

export default shield({
  Query: {
    ...permissions1,
    ...permissions2,
  }
})

2.

You can logically combine your permissions using logic operators. Available operators are and, or and not. You can read more about them here https://github.com/maticzav/graphql-shield#and-or-not