readDecorators.js

export const requireAuth = (target, name, descriptor) => {
    const resolver = target[name].resolve;
    target[name].resolve = (user, args, context) => {
        const { user: authUser } = context;
        // If there exists an authUser, then allow the read
        if (authUser) {
            return resolver(user, args, context);
        } else {
            // this field will resolve to null for unauthenticated users
            return null;
        }
    };
};

export const requireSameAuthUser = (target, name, descriptor) => {
    const resolver = target[name].resolve;
    target[name].resolve = (user, args, context) => {
        const { user: authUser } = context;
        // If this is the owner, allow the read
        if (authUser && user.id === authUser.id) {
            return resolver(user, args, context);
        } else {
            // this field will resolve to null for all other viewers
            return null;
        }
    };
};