bank-green/bankgreen-django

Unauthenticated GraphQL API

Closed this issue · 5 comments

RogerTangos commented

This is a big ticket.

  • An unauthenticated user should be able to query a graphQL API and receive...

    • all of the fields defined at the brand level
    • the types of datasources that are associated with the brand (i.e. banktrack, bocc, etc)
    • all of the fields in the brand's associated commentary model

  • An unauthenticated user should be able to filter the above query using the following parameters

    • rating
    • country
    • boolean fields in the commentary model

  • An unauthenticated user should not be able to do the following:

    • see any data in the datasource fields
    • create or update model instances or fields

In this ticket, it is not necessary to provide any authentication mechanism.

skerdilajdhoxha commented

Done, but I'm not sure about the types of datasources that are associated with the brand (i.e. banktrack, bocc, etc).
What do you mean with this?

RogerTangos commented

the types of datasources that are associated with the brand

Given a brand, what datasources have foreign keys pointing to the brand, and are the classes of each of these datasources?

For this ticket, could attach sample graphql queries?

skerdilajdhoxha commented

Done. Created GraphQL-README file to document queries.

RogerTangos commented

Thank you for the readme. Could you walk me through these queries sometime? I'm having trouble running them, but suspect that this is due to my own error.

RogerTangos commented

This is great. Thank you!