72 lines
2.3 KiB
Go
72 lines
2.3 KiB
Go
// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
|
|
//
|
|
// Permission to use, copy, modify, and/or distribute this software for any
|
|
// purpose with or without fee is hereby granted, provided that the above
|
|
// copyright notice and this permission notice appear in all copies.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
|
|
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
|
|
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
// PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
package graphql
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"runtime/debug"
|
|
|
|
"github.com/getprobo/probo/pkg/auth"
|
|
"github.com/vektah/gqlparser/v2/gqlerror"
|
|
"go.gearno.de/kit/httpserver"
|
|
"go.gearno.de/kit/log"
|
|
)
|
|
|
|
func RecoverFunc(ctx context.Context, err any) error {
|
|
if gqlErr, ok := err.(*gqlerror.Error); ok {
|
|
return gqlErr
|
|
}
|
|
|
|
var errSAMLRequired auth.ErrSAMLAuthRequired
|
|
if errors.As(asError(err), &errSAMLRequired) {
|
|
return &gqlerror.Error{
|
|
Message: "Additional authentication required to access this organization",
|
|
Extensions: map[string]any{
|
|
"code": "AUTHENTICATION_REQUIRED",
|
|
"requiresSaml": true,
|
|
"redirectUrl": errSAMLRequired.RedirectURL,
|
|
"samlConfigId": errSAMLRequired.ConfigID.String(),
|
|
"organizationId": errSAMLRequired.OrganizationID.String(),
|
|
},
|
|
}
|
|
}
|
|
|
|
var errPasswordRequired auth.ErrPasswordAuthRequired
|
|
if errors.As(asError(err), &errPasswordRequired) {
|
|
return &gqlerror.Error{
|
|
Message: "Additional authentication required to access this organization",
|
|
Extensions: map[string]any{
|
|
"code": "AUTHENTICATION_REQUIRED",
|
|
"requiresSaml": false,
|
|
"redirectUrl": errPasswordRequired.RedirectURL,
|
|
"organizationId": errPasswordRequired.OrganizationID.String(),
|
|
},
|
|
}
|
|
}
|
|
|
|
logger := httpserver.LoggerFromContext(ctx)
|
|
logger.Error("resolver panic", log.Any("error", err), log.Any("stack", string(debug.Stack())))
|
|
|
|
return errors.New("internal server error")
|
|
}
|
|
|
|
func asError(err any) error {
|
|
if e, ok := err.(error); ok {
|
|
return e
|
|
}
|
|
return errors.New("unknown panic")
|
|
}
|