Phoenix 1.3 Abinsthe Authorization Example

To start your Phoenix server:

• Install dependencies with mix deps.get
• Create and migrate your database with mix ecto.create && mix ecto.migrate
• Seed database with mix run priv/repo/seeds.exs
• Start Phoenix endpoint with mix phx.server

To test:

• Navigate to http://localhost:4000/graphiql
• Try a few queries & mutations, eg:

query (unauthorized)

{
  user(id: 1) {
    id
    username
    email
  }
}

response

{
  "data": {
    "user": {
      "username": "User A",
      "id": null,
      "email": null
    }
  }
}

---

query (w/ header: authorization: "useratoken")

{
  user(id: 1) {
    id
    username
    email
  }
}

response

{
  "data": {
    "user": {
      "username": "User A",
      "id": "5",
      "email": "[email protected]"
    }
  }
}

---

mutation (unauthorized)

mutation CreatePost {
  createPost(title: "Post Title", body:"Body of the post.") {
    body
    title
  }
}

response

{
  "errors": [
    {
      "path": [
        "createPost"
      ],
      "message": "In field \"createPost\": Unauthorized",
      "locations": [
        {
          "line": 3,
          "column": 0
        }
      ]
    }
  ],
  "data": {
    "createPost": null
  }
}

---

mutation (w/ header: authorization: "userbtoken")

mutation CreatePost {
  createPost(title: "Post Title", body:"Body of the post.") {
    body
    title
  }
}

response

{
  "data": {
    "createPost": {
      "title": "Post Title",
      "body": "Body of the post."
    }
  }
}