Upgrade GraphQL gem to 1.8.17

- Due to exAspArk/batch-loader#32,
we  changed BatchLoader.for into BatchLoader::GraphQL.for
- since our results are wrapped in a BatchLoader::GraphQL,
calling `sync` during authorization is required to get real object
- `graphql` now has it's own authorization system.  Our
`authorized?` method conflicted and required renaming

Author: Brett Walker

Gemfile

@@ -86,7 +86,7 @@ gem 'grape-entity', '~> 0.7.1'
 gem 'rack-cors', '~> 1.0.0', require: 'rack/cors'
 
 # GraphQL API
-gem 'graphql', '= 1.8.4'
+gem 'graphql', '= 1.8.17'
 gem 'graphiql-rails', '~> 1.4.10'
 gem 'apollo_upload_server', '~> 2.0.0.beta3'
 gem 'graphql-docs', '~> 1.6.0', group: [:development, :test]

Gemfile.lock

@@ -402,7 +402,7 @@ GEM
     graphiql-rails (1.4.10)
       railties
       sprockets-rails
-    graphql (1.8.4)
+    graphql (1.8.17)
     graphql-docs (1.6.0)
       commonmarker (~> 0.16)
       escape_utils (~> 1.2)
@@ -1146,7 +1146,7 @@ DEPENDENCIES
   grape-path-helpers (~> 1.1)
   grape_logging (~> 1.7)
   graphiql-rails (~> 1.4.10)
-  graphql (= 1.8.4)
+  graphql (= 1.8.17)
   graphql-docs (~> 1.6.0)
   grpc (~> 1.19.0)
   gssapi

app/graphql/mutations/notes/create/base.rb

@@ -18,8 +18,6 @@ class Base < Mutations::Notes::Base
                   required: true,
                   description: copy_field_description(Types::Notes::NoteType, :body)
 
-        private
-
         def resolve(args)
           noteable = authorized_find!(id: args[:noteable_id])
 
@@ -37,6 +35,8 @@ def resolve(args)
           }
         end
 
+        private
+
         def create_note_params(noteable, args)
           {
             noteable: noteable,

app/graphql/resolvers/full_path_resolver.rb

@@ -11,7 +11,7 @@ module FullPathResolver
     end
 
     def model_by_full_path(model, full_path)
-      BatchLoader.for(full_path).batch(key: model) do |full_paths, loader, args|
+      BatchLoader::GraphQL.for(full_path).batch(key: model) do |full_paths, loader, args|
         # `with_route` avoids an N+1 calculating full_path
         args[:key].where_full_path_in(full_paths).with_route.each do |model_instance|
           loader.call(model_instance.full_path, model_instance)

app/graphql/resolvers/issues_resolver.rb

@@ -41,13 +41,11 @@ class IssuesResolver < BaseResolver
 
     type Types::IssueType, null: true
 
-    alias_method :project, :object
-
     def resolve(**args)
       # The project could have been loaded in batch by `BatchLoader`.
       # At this point we need the `id` of the project to query for issues, so
       # make sure it's loaded and not `nil` before continuing.
-      project.sync if project.respond_to?(:sync)
+      project = object.respond_to?(:sync) ? object.sync : object
       return Issue.none if project.nil?
 
       # Will need to be be made group & namespace aware with

app/graphql/resolvers/merge_requests_resolver.rb

@@ -25,8 +25,10 @@ def resolve(**args)
 
     # rubocop: disable CodeReuse/ActiveRecord
     def batch_load(iid)
-      BatchLoader.for(iid.to_s).batch(key: project) do |iids, loader, args|
-        args[:key].merge_requests.where(iid: iids).each do |mr|
+      BatchLoader::GraphQL.for(iid.to_s).batch(key: project) do |iids, loader, args|
+        arg_key = args[:key].respond_to?(:sync) ? args[:key].sync : args[:key]
+
+        arg_key.merge_requests.where(iid: iids).each do |mr|
           loader.call(mr.iid.to_s, mr)
         end
       end

app/graphql/resolvers/namespace_projects_resolver.rb

@@ -9,13 +9,11 @@ class NamespaceProjectsResolver < BaseResolver
 
     type Types::ProjectType, null: true
 
-    alias_method :namespace, :object
-
     def resolve(include_subgroups:)
       # The namespace could have been loaded in batch by `BatchLoader`.
       # At this point we need the `id` or the `full_path` of the namespace
       # to query for projects, so make sure it's loaded and not `nil` before continuing.
-      namespace.sync if namespace.respond_to?(:sync)
+      namespace = object.respond_to?(:sync) ? object.sync : object
       return Project.none if namespace.nil?
 
       if include_subgroups

ee/app/graphql/resolvers/design_management/design_resolver.rb

@@ -10,7 +10,7 @@ class DesignResolver < BaseResolver
                             'If argument is omitted or nil then all designs will reflect the latest version.'
 
       def resolve(at_version: nil)
-        version = at_version ? GitlabSchema.object_from_id(at_version) : nil
+        version = at_version ? GitlabSchema.object_from_id(at_version)&.sync : nil
 
         ::DesignManagement::DesignsFinder.new(
           object.issue,

ee/app/graphql/resolvers/design_management/version_resolver.rb

@@ -15,7 +15,7 @@ def resolve(parent: nil)
         # for consistency we should only present versions up to the given
         # version here.
         at_version = Gitlab::Graphql::FindArgumentInParent.find(parent, :at_version, limit_depth: 4)
-        version = at_version ? GitlabSchema.object_from_id(at_version) : nil
+        version = at_version ? GitlabSchema.object_from_id(at_version).sync : nil
 
         ::DesignManagement::VersionsFinder.new(
           design_or_collection,

ee/app/graphql/resolvers/epic_resolver.rb

@@ -25,7 +25,9 @@ class EpicResolver < BaseResolver
     type Types::EpicType, null: true
 
     def resolve(**args)
-      return [] unless object.present?
+      @resolver_object = object.respond_to?(:sync) ? object.sync : object
+
+      return [] unless resolver_object.present?
       return [] unless epic_feature_enabled?
 
       validate_date_params!(args)
@@ -35,6 +37,8 @@ def resolve(**args)
 
     private
 
+    attr_reader :resolver_object
+
     def find_epics(args)
       EpicsFinder.new(context[:current_user], args).execute
     end
@@ -62,17 +66,17 @@ def transform_args(args)
       transformed
     end
 
-    # `object` refers to the object we're currently querying on, and is usually a `Group`
+    # `resolver_object` refers to the object we're currently querying on, and is usually a `Group`
     # when querying an Epic.  In the case of field that uses this resolver, for example
-    # an Epic's `children` field, then `object` is an `EpicPresenter` (rather than an Epic).
+    # an Epic's `children` field, then `resolver_object` is an `EpicPresenter` (rather than an Epic).
     # But that's the epic we need in order to scope the find to only children of this epic,
     # using the `parent_id`
     def parent
-      object if object.is_a?(EpicPresenter)
+      resolver_object if resolver_object.is_a?(EpicPresenter)
     end
 
     def group
-      return object if object.is_a?(Group)
+      return resolver_object if resolver_object.is_a?(Group)
 
       parent.group
     end

ee/app/graphql/types/design_management/design_type.rb

@@ -35,9 +35,10 @@ def image(parent:)
         # If no argument is found then a nil value for sha is fine
         # and the image displayed will be the latest version
         version_id = Gitlab::Graphql::FindArgumentInParent.find(parent, :at_version, limit_depth: 4)
-        sha = version_id ? GitlabSchema.object_from_id(version_id).sha : nil
+        sha = version_id ? GitlabSchema.object_from_id(version_id)&.sync&.sha : nil
 
         project = Gitlab::Graphql::Loaders::BatchModelLoader.new(Project, design.project_id).find
+        project = project&.sync
 
         Gitlab::Routing.url_helpers.project_design_url(project, design, sha)
       end

ee/spec/graphql/resolvers/epic_resolver_spec.rb

@@ -125,7 +125,7 @@
 
   context "when passing a non existent, batch loaded group" do
     let(:group) do
-      BatchLoader.for("non-existent-path").batch do |_fake_paths, loader, _|
+      BatchLoader::GraphQL.for("non-existent-path").batch do |_fake_paths, loader, _|
         loader.call("non-existent-path", nil)
       end
     end

lib/gitlab/graphql/authorize/authorize_field_service.rb

@@ -54,14 +54,14 @@ def authorize_against(parent_typed_object, resolved_type)
             # The field is a built-in/scalar type, or a list of scalars
             # authorize using the parent's object
             parent_typed_object.object
-          elsif resolved_type.respond_to?(:object)
-            # The field is a type representing a single object, we'll authorize
-            # against the object directly
-            resolved_type.object
           elsif @field.connection? || resolved_type.is_a?(Array)
             # The field is a connection or a list of non-built-in types, we'll
             # authorize each element when rendering
             nil
+          elsif resolved_type.respond_to?(:object)
+            # The field is a type representing a single object, we'll authorize
+            # against the object directly
+            resolved_type.object
           else
             # Resolved type is a single object that might not be loaded yet by
             # the batchloader, we'll authorize that

lib/gitlab/graphql/authorize/authorize_resource.rb

@@ -29,19 +29,25 @@ def find_object(*args)
 
         def authorized_find!(*args)
           object = find_object(*args)
+          object = object.sync if object.respond_to?(:sync)
+
           authorize!(object)
 
           object
         end
 
         def authorize!(object)
-          unless authorized?(object)
+          unless authorized_resource?(object)
             raise Gitlab::Graphql::Errors::ResourceNotAvailable,
                   "The resource that you are attempting to access does not exist or you don't have permission to perform this action"
           end
         end
 
-        def authorized?(object)
+        # this was named `#authorized?`, however it conflicts with the native
+        # graphql gem version
+        # TODO consider adopting the gem's built in authorization system
+        # https://gitlab.com/gitlab-org/gitlab-ee/issues/13984
+        def authorized_resource?(object)
           # Sanity check. We don't want to accidentally allow a developer to authorize
           # without first adding permissions to authorize against
           if self.class.required_permissions.empty?

lib/gitlab/graphql/loaders/batch_lfs_oid_loader.rb

@@ -9,7 +9,7 @@ def initialize(repository, blob_id)
         end
 
         def find
-          BatchLoader.for(blob_id).batch(key: repository) do |blob_ids, loader, batch_args|
+          BatchLoader::GraphQL.for(blob_id).batch(key: repository) do |blob_ids, loader, batch_args|
             Gitlab::Git::Blob.batch_lfs_pointers(batch_args[:key], blob_ids).each do |loaded_blob|
               loader.call(loaded_blob.id, loaded_blob.lfs_oid)
             end

lib/gitlab/graphql/loaders/batch_model_loader.rb

@@ -12,7 +12,7 @@ def initialize(model_class, model_id)
 
         # rubocop: disable CodeReuse/ActiveRecord
         def find
-          BatchLoader.for({ model: model_class, id: model_id.to_i }).batch do |loader_info, loader|
+          BatchLoader::GraphQL.for({ model: model_class, id: model_id.to_i }).batch do |loader_info, loader|
             per_model = loader_info.group_by { |info| info[:model] }
             per_model.each do |model, info|
               ids = info.map { |i| i[:id] }

lib/gitlab/graphql/loaders/batch_project_statistics_loader.rb

@@ -11,7 +11,7 @@ def initialize(project_id)
         end
 
         def find
-          BatchLoader.for(project_id).batch do |project_ids, loader|
+          BatchLoader::GraphQL.for(project_id).batch do |project_ids, loader|
             ProjectStatistics.for_project_ids(project_ids).each do |statistics|
               loader.call(statistics.project_id, statistics)
             end

lib/gitlab/graphql/loaders/batch_root_storage_statistics_loader.rb

@@ -11,7 +11,7 @@ def initialize(namespace_id)
         end
 
         def find
-          BatchLoader.for(namespace_id).batch do |namespace_ids, loader|
+          BatchLoader::GraphQL.for(namespace_id).batch do |namespace_ids, loader|
             Namespace::RootStorageStatistics.for_namespace_ids(namespace_ids).each do |statistics|
               loader.call(statistics.namespace_id, statistics)
             end

lib/gitlab/graphql/loaders/pipeline_for_sha_loader.rb

@@ -11,7 +11,7 @@ def initialize(project, sha)
         end
 
         def find_last
-          BatchLoader.for(sha).batch(key: project) do |shas, loader, args|
+          BatchLoader::GraphQL.for(sha).batch(key: project) do |shas, loader, args|
             pipelines = args[:key].ci_pipelines.latest_for_shas(shas)
 
             pipelines.each do |pipeline|

spec/graphql/gitlab_schema_spec.rb

@@ -129,7 +129,7 @@
 
         result = described_class.object_from_id(user.to_global_id.to_s)
 
-        expect(result.__sync).to eq(user)
+        expect(result.sync).to eq(user)
       end
 
       it 'batchloads the queries' do
@@ -138,7 +138,7 @@
 
         expect do
           [described_class.object_from_id(user1.to_global_id),
-           described_class.object_from_id(user2.to_global_id)].map(&:__sync)
+           described_class.object_from_id(user2.to_global_id)].map(&:sync)
         end.not_to exceed_query_limit(1)
       end
     end
@@ -149,7 +149,7 @@
 
         result = described_class.object_from_id(note.to_global_id)
 
-        expect(result.__sync).to eq(note)
+        expect(result.sync).to eq(note)
       end
 
       it 'batchloads the queries' do
@@ -158,7 +158,7 @@
 
         expect do
           [described_class.object_from_id(note1.to_global_id),
-           described_class.object_from_id(note2.to_global_id)].map(&:__sync)
+           described_class.object_from_id(note2.to_global_id)].map(&:sync)
         end.not_to exceed_query_limit(1)
       end
     end

spec/graphql/mutations/concerns/mutations/resolves_project_spec.rb

@@ -14,6 +14,6 @@
     project = create(:project)
 
     expect(Resolvers::ProjectResolver).to receive(:new).with(object: nil, context: context).and_call_original
-    expect(mutation.resolve_project(full_path: project.full_path)).to eq(project)
+    expect(mutation.resolve_project(full_path: project.full_path).sync).to eq(project)
   end
 end

spec/graphql/resolvers/group_resolver_spec.rb

@@ -12,15 +12,15 @@
     it 'batch-resolves groups by full path' do
       paths = [group1.full_path, group2.full_path]
 
-      result = batch(max_queries: 1) do
+      result = batch_sync(max_queries: 1) do
         paths.map { |path| resolve_group(path) }
       end
 
       expect(result).to contain_exactly(group1, group2)
     end
 
     it 'resolves an unknown full_path to nil' do
-      result = batch { resolve_group('unknown/project') }
+      result = batch_sync { resolve_group('unknown/project') }
 
       expect(result).to be_nil
     end

spec/graphql/resolvers/issues_resolver_spec.rb

@@ -110,7 +110,7 @@
 
   context "when passing a non existent, batch loaded project" do
     let(:project) do
-      BatchLoader.for("non-existent-path").batch do |_fake_paths, loader, _|
+      BatchLoader::GraphQL.for("non-existent-path").batch do |_fake_paths, loader, _|
         loader.call("non-existent-path", nil)
       end
     end

spec/graphql/resolvers/merge_requests_resolver_spec.rb

@@ -17,23 +17,23 @@
 
   describe '#resolve' do
     it 'batch-resolves by target project full path and individual IID' do
-      result = batch(max_queries: 2) do
+      result = batch_sync(max_queries: 2) do
         resolve_mr(project, iid: iid_1) + resolve_mr(project, iid: iid_2)
       end
 
       expect(result).to contain_exactly(merge_request_1, merge_request_2)
     end
 
     it 'batch-resolves by target project full path and IIDS' do
-      result = batch(max_queries: 2) do
+      result = batch_sync(max_queries: 2) do
         resolve_mr(project, iids: [iid_1, iid_2])
       end
 
       expect(result).to contain_exactly(merge_request_1, merge_request_2)
     end
 
     it 'can batch-resolve merge requests from different projects' do
-      result = batch(max_queries: 3) do
+      result = batch_sync(max_queries: 3) do
         resolve_mr(project, iid: iid_1) +
           resolve_mr(project, iid: iid_2) +
           resolve_mr(other_project, iid: other_iid)
@@ -43,13 +43,13 @@
     end
 
     it 'resolves an unknown iid to be empty' do
-      result = batch { resolve_mr(project, iid: -1) }
+      result = batch_sync { resolve_mr(project, iid: -1) }
 
-      expect(result).to be_empty
+      expect(result.compact).to be_empty
     end
 
     it 'resolves empty iids to be empty' do
-      result = batch { resolve_mr(project, iids: []) }
+      result = batch_sync { resolve_mr(project, iids: []) }
 
       expect(result).to be_empty
     end

spec/graphql/resolvers/namespace_projects_resolver_spec.rb

@@ -46,7 +46,7 @@
 
   context "when passing a non existent, batch loaded namespace" do
     let(:namespace) do
-      BatchLoader.for("non-existent-path").batch do |_fake_paths, loader, _|
+      BatchLoader::GraphQL.for("non-existent-path").batch do |_fake_paths, loader, _|
         loader.call("non-existent-path", nil)
       end
     end