Lambdas use accessJwt - fixes #42 (#43)

graphql, dql.query and dql.mutate helper functions must pass the
accessJWT token in the header "X-Dgraph-AccessToken" to get the requests
on /graphql /query and /mutate working in ACL enabled and multi-tenant
scenarii.

Author: rderbier

.vscode/launch.json

@@ -0,0 +1,11 @@
+{
+    "version": "0.2.0",
+    "configurations": [
+        {
+            "type": "node",
+            "request": "attach",
+            "name": "Attach to Process",
+            "port": 9230
+          }
+    ]
+  }

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:14-alpine as build
+FROM node:20-alpine as build
 
 RUN apk add python3 make g++
 WORKDIR /app
@@ -8,12 +8,12 @@ RUN npm install
 COPY . .
 ARG nodeEnv=production
 ENV NODE_ENV $nodeEnv
-RUN npm run build && if [[ "$nodeEnv" == "production" ]]; then mv node_modules/node-webcrypto-ossl tmp && rm -rf node_modules && mkdir node_modules && mv tmp node_modules/node-webcrypto-ossl && npm install --no-optional; fi
+RUN npm run build
 
 # Used just for tests
 ENTRYPOINT [ "npm", "run" ]
 
-FROM node:14-alpine
+FROM node:20-alpine
 ENV NODE_ENV production
 RUN adduser app -h /app -D
 USER app

Readme.md

@@ -36,37 +36,53 @@ self.addMultiParentGraphQLResolvers({
 
 ## Running Locally
 
-First launch dgraph and load it with the todo schema (and add a todo or two).
-
-```graphql
-type User {
-   id: ID!
-   firstName: String!
-   lastName: String!
-   fullName: String @lambda
-}
+Create a "local-lambda" docker image
+``` 
+docker build -t local-lambda .
+```
+###  option 1 - run the lambda server alone with
+```
+docker run -d -p 8686:8686 local-lambda
+```
+You can perform a basic test using curl:
 
-type Todo {
-   id: ID!
-   title: String
-}
+```bash
+curl localhost:8686/graphql-worker -H "Content-Type: application/json" -d '{"resolver":"User.fullName","parents":[{"firstName":"Dgraph","lastName":"Labs"}]}'
+```
 
-type Query {
-  todoTitles: [String] @lambda
-}
+
+### option 2 - use one of the scripts in dgraph/contrib/local-test
+
+- change the lambda image used in the script to use local-lambda for your tests
+- check the script you want to load. To run the lambda jest, load the script provided in this repo.
+
+For testing, update exosystem.config.js
+
+- add node_args: ["--inspect"], to enable debugging.
+- set instances to 1, to be sure that the port 9230 will be on the only instance your are testing.
+
+in VS code, attach to the docker container, and then launch the debug confugration "Attach to Process"
+
+
+### Tests
+run 
 ```
+docker-compose up
+``` 
+to get an cluster with Dgraph zero, alpha and lambda server
+
+run 
 
-```bash
-# host.docker.internal may not work on old versions of docker
-docker run -it --rm -p 8686:8686 -v /path/to/script.js:/app/script/script.js -e DGRAPH_URL=http://host.docker.internal:8080 dgraph/dgraph-lambda
 ```
+export DGRAPH_URL=http://localhost:8080
 
-Note for linux: host.docker.internal doesn't work on older versions of docker on linux. You can use `DGRAPH_URL=http://172.17.0.1:8080` instead
+export INTEGRATION_TEST=true 
 
-Then test it out with the following curls
-```bash
-curl localhost:8686/graphql-worker -H "Content-Type: application/json" -d '{"resolver":"User.fullName","parents":[{"firstName":"Dgraph","lastName":"Labs"}]}'
+npm test
 ```
+to execute the tests.
+
+
 
 ## Environment
 

acl/hmac_secret_file

@@ -0,0 +1 @@
+f77dca9a74915c339bff019ffefefb36

docker-compose.yml

@@ -1,17 +1,45 @@
 version: '3.4'
 services:
-  dgraph-lambda:
+  lambda:
     build:
       context: .
-      target: build
       args:
         nodeEnv: development
+    volumes:
+      - ./script/script.js:/app/script/script.js:ro
+    environment:
+      - DGRAPH_URL=http://host.docker.internal:8080
+      - MAX_MEMORY_LIMIT=256M
     ports:
-      - "8686:8686"
+      - 8686:8686
     depends_on:
-      - dgraph
+      - alpha
+  # Dgraph Zero controls the cluster
+  zero:
+    image: dgraph/dgraph:latest
+    container_name: lambda_dgraph_zero
+    ports:
+      - 5080:5080
+      - 6080:6080
+    command: dgraph zero --my=zero:5080 --logtostderr -v=2 --telemetry sentry=false
+    restart: unless-stopped
+  # Dgraph Alpha hosts the graph and indexes
+  alpha:
+    image: dgraph/dgraph:latest
+    container_name: lambda_dgraph_alpha
+    volumes:
+      - ./acl:/config/acl
+    ports:
+      - 8080:8080
+      - 9080:9080
+    command: >
+      dgraph alpha --my=alpha:7080 --zero=zero:5080
+        --security whitelist=0.0.0.0/0
+        --logtostderr -v=2
+        --graphql lambda-url=http://host.docker.internal:8686/graphql-worker
+        --telemetry sentry=false
     environment:
-      DGRAPH_URL: http://dgraph:8080
-      INTEGRATION_TEST: "true"
-  dgraph:
-    image: "dgraph/standalone:v21.03.2"
+      DGRAPH_ALPHA_ACL: secret-file=/config/acl/hmac_secret_file
+    restart: unless-stopped
+
+

ecosystem.config.js

@@ -20,3 +20,4 @@ module.exports = {
     },
   ],
 };
+// add the option       node_args: ["--inspect"], to enable debugging.