@auth directives don't apply to nested objects when using interfaces?

Issues GraphQL
, , , ,
6

Okay, thanks to your very helpful feedback I was able to reproduce. Turns out my example here was oversimplified. Turns out the issue is when interfaces nest one another.

N.B. In the schema below, the wonky auth rules for ApprovableChange just mean “you shouldn’t be able to see this”

Example that works on both standalone:v20.11.3 and standalone:latest as of 2021/05/28:

Schema 
interface Approvable
  @auth(
    query: {
      rule: """
      query {
        queryApprovable(filter: { approved: true }) {
          id
        }
      }
      """
    }
  ) {
  id: ID!
  approved: Boolean! @search
  changes: [ApprovableChange!] @hasInverse(field: approvable)
}

interface ApprovableChange
  @auth(
    query: {
      rule: """
      query {
        queryApprovableChange(filter: { x: true, and: { x: false } }) {
          x
        }
      }
      """
    }
  ) {
  x: Boolean! @search
  approvable: Approvable! @hasInverse(field: changes)
}

type PostContent implements ApprovableChange {
  id: ID!
}

type Post implements Approvable {
  id: ID!
}
Data 
<0x2> <dgraph.type> "Post"^^<xs:string> <0x0> .
<0x2> <dgraph.type> "Approvable"^^<xs:string> <0x0> .
<0x3> <dgraph.type> "ApprovableChange"^^<xs:string> <0x0> .
<0x3> <dgraph.type> "PostContent"^^<xs:string> <0x0> .
<0x2> <Approvable.changes> <0x3> <0x0> .
<0x3> <ApprovableChange.x> "true"^^<xs:boolean> <0x0> .
<0x2> <Approvable.approved> "true"^^<xs:boolean> <0x0> .
<0x3> <ApprovableChange.approvable> <0x2> <0x0> .
Query 
query {
  queryPostContent {
    x
  }
  
  queryPost {
    id
    changes {
      x
    }
  }
}
Result 
{
  "data": {
    "queryPostContent": [],
    "queryPost": [
      {
        "id": "0x2",
        "changes": [
          {
            "x": true
          }
        ]
      }
    ]
  },
  "extensions": {
    "touched_uids": 15
  }
}

Let me know if I’ve actually found something and I can file a more formal bug report.