Implementation Example?

Hello! It’s great to have this, I’m just a little confused on implementation. I’ve added the authentication backends settings, the middleware settings, and the verify/refresh token mutations added.

This is probably obvious, but how do I create a login mutation? This is what I have from the howtographql tutorial:

from django.contrib.auth.models import User
from django.contrib.auth import authenticate
from graphene import relay
from graphene_django import DjangoObjectType


class UserNode(DjangoObjectType):
    class Meta:
        model = User
        filter_fields = [
            'username',
        ]
        interfaces = (relay.Node, )


class LogIn(graphene.Mutation):
    user = graphene.Field(UserNode)

    class Arguments:
        username = graphene.String()
        password = graphene.String()

    def mutate(self, info, username, password):

        user = authenticate(
            username=username,
            password=password,
        )

        if not user:
            raise Exception('Invalid username or password')

        info.context.session['token'] = user.token
        return LogIn(user=user)


class Mutation(object):
        login = LogIn.Field()

Of course that’s looking for the token property for a user, which is not found. Any thoughts? Forgive my newness to django/graphql!

[mongkok]

Hey @evanheckert!

welcome to GraphQL.

you can use a resolver method for the token and others non-model fields: http://docs.graphene-python.org/en/latest/types/objecttypes/#resolvers

import graphene

from django.contrib.auth import get_user_model
from graphene_django import DjangoObjectType

from graphql_jwt.utils import jwt_encode, jwt_payload

class UserNode(DjangoObjectType):
    token = graphene.String()

    class Meta:
        model = get_user_model()
        filter_fields = [
            'username',
        ]
        interfaces = (relay.Node,)

        def resolve_token(self, info, **kwargs):
            if info.context.user != self:
                return None

            payload = jwt_payload(self)
            return jwt_encode(payload)

Add Django login function to your mutation to attach authenticated user to the current session: https://docs.djangoproject.com/en/1.11/topics/auth/default/#how-to-log-a-user-in

import graphene

from django.contrib.auth import authenticate, login

class LogIn(graphene.Mutation):
    user = graphene.Field(UserNode)

    class Arguments:
        username = graphene.String()
        password = graphene.String()

    @classmethod
    def mutate(cls, root, info, username, password):
        user = authenticate(username=username, password=password)

        if user is None:
            raise Exception('Please enter a correct username and password')

        if not user.is_active:
            raise Exception('It seems your account has been disabled')

        login(info.context, user)
        return cls(user=user)

[mongkok]

@TitanFighter https://github.com/howtographql/graphql-python