Add complexity support to codegen, handler

codegen/config.go

@@ -82,8 +82,9 @@ type TypeMapEntry struct {
 }
 
 type TypeMapField struct {
-	Resolver  bool   `yaml:"resolver"`
-	FieldName string `yaml:"fieldName"`
+	Resolver   bool   `yaml:"resolver"`
+	Complexity bool   `yaml:"complexity"`
+	FieldName  string `yaml:"fieldName"`
 }
 
 func (c *PackageConfig) normalize() error {

codegen/object.go

@@ -31,15 +31,16 @@ type Object struct {
 type Field struct {
 	*Type
 
-	GQLName        string          // The name of the field in graphql
-	GoFieldType    GoFieldType     // The field type in go, if any
-	GoReceiverName string          // The name of method & var receiver in go, if any
-	GoFieldName    string          // The name of the method or var in go, if any
-	Args           []FieldArgument // A list of arguments to be passed to this field
-	ForceResolver  bool            // Should be emit Resolver method
-	NoErr          bool            // If this is bound to a go method, does that method have an error as the second argument
-	Object         *Object         // A link back to the parent object
-	Default        interface{}     // The default value
+	GQLName          string          // The name of the field in graphql
+	GoFieldType      GoFieldType     // The field type in go, if any
+	GoReceiverName   string          // The name of method & var receiver in go, if any
+	GoFieldName      string          // The name of the method or var in go, if any
+	Args             []FieldArgument // A list of arguments to be passed to this field
+	ForceResolver    bool            // Should be emit Resolver method
+	CustomComplexity bool            // Uses a custom complexity calculation
+	NoErr            bool            // If this is bound to a go method, does that method have an error as the second argument
+	Object           *Object         // A link back to the parent object
+	Default          interface{}     // The default value
 }
 
 type FieldArgument struct {
@@ -70,6 +71,15 @@ func (o *Object) HasResolvers() bool {
 	return false
 }
 
+func (o *Object) HasComplexity() bool {
+	for _, f := range o.Fields {
+		if f.CustomComplexity {
+			return true
+		}
+	}
+	return false
+}
+
 func (f *Field) IsResolver() bool {
 	return f.GoFieldName == ""
 }
@@ -154,6 +164,24 @@ func (f *Field) ResolverDeclaration() string {
 	return res
 }
 
+func (f *Field) ComplexitySignature() string {
+	res := fmt.Sprintf("func(childComplexity int")
+	for _, arg := range f.Args {
+		res += fmt.Sprintf(", %s %s", arg.GoVarName, arg.Signature())
+	}
+	res += ") int"
+	return res
+}
+
+func (f *Field) ComplexityArgs() string {
+	var args []string
+	for _, arg := range f.Args {
+		args = append(args, "args["+strconv.Quote(arg.GQLName)+"].("+arg.Signature()+")")
+	}
+
+	return strings.Join(args, ", ")
+}
+
 func (f *Field) CallArgs() string {
 	var args []string
 
@@ -195,7 +223,7 @@ func (f *Field) doWriteJson(val string, remainingMods []string, isPtr bool, dept
 					rctx := graphql.GetResolverContext(ctx)
 					rctx.PushIndex({{.index}})
 					defer rctx.Pop()
-					{{ .next }} 
+					{{ .next }}
 				}())
 			}
 			return {{.arr}}`, map[string]interface{}{

codegen/object_build.go

@@ -135,11 +135,13 @@ func (cfg *Config) buildObject(types NamedTypes, typ *ast.Definition, imports *I
 		}
 
 		var forceResolver bool
+		var customComplexity bool
 		var goName string
 		if entryExists {
 			if typeField, ok := typeEntry.Fields[field.Name]; ok {
 				goName = typeField.FieldName
 				forceResolver = typeField.Resolver
+				customComplexity = typeField.Complexity
 			}
 		}
 
@@ -168,12 +170,13 @@ func (cfg *Config) buildObject(types NamedTypes, typ *ast.Definition, imports *I
 		}
 
 		obj.Fields = append(obj.Fields, Field{
-			GQLName:       field.Name,
-			Type:          types.getType(field.Type),
-			Args:          args,
-			Object:        obj,
-			GoFieldName:   goName,
-			ForceResolver: forceResolver,
+			GQLName:          field.Name,
+			Type:             types.getType(field.Type),
+			Args:             args,
+			Object:           obj,
+			GoFieldName:      goName,
+			ForceResolver:    forceResolver,
+			CustomComplexity: customComplexity,
 		})
 	}
 

codegen/templates/generated.gotpl

@@ -13,12 +13,14 @@ func NewExecutableSchema(cfg Config) graphql.ExecutableSchema {
 	return &executableSchema{
 		resolvers: cfg.Resolvers,
 		directives: cfg.Directives,
+		complexity: cfg.Complexity,
 	}
 }
 
 type Config struct {
 	Resolvers  ResolverRoot
 	Directives DirectiveRoot
+	Complexity ComplexityRoot
 }
 
 type ResolverRoot interface {
@@ -35,7 +37,21 @@ type DirectiveRoot struct {
 {{ end }}
 }
 
-{{- range $object := .Objects -}}
+type ComplexityRoot struct {
+{{ range $object := .Objects }}
+	{{ if $object.HasComplexity }}
+		{{ $object.GoType }} struct {
+		{{ range $field := $object.Fields }}
+			{{ if $field.CustomComplexity }}
+				{{ $field.GoFieldName }} {{ $field.ComplexitySignature }}
+			{{ end }}
+		{{ end }}
+		}
+	{{ end }}
+{{ end }}
+}
+
+{{ range $object := .Objects -}}
 	{{ if $object.HasResolvers }}
 		type {{$object.GQLType}}Resolver interface {
 		{{ range $field := $object.Fields -}}
@@ -48,12 +64,42 @@ type DirectiveRoot struct {
 type executableSchema struct {
 	resolvers  ResolverRoot
 	directives DirectiveRoot
+	complexity ComplexityRoot
 }
 
 func (e *executableSchema) Schema() *ast.Schema {
 	return parsedSchema
 }
 
+func (e *executableSchema) Complexity(typeName, field string, childComplexity int, rawArgs map[string]interface{}) (int, bool) {
+	switch typeName + "." + field {
+	{{ range $object := .Objects }}
+		{{ range $field := $object.Fields }}
+			{{ if $field.CustomComplexity }}
+				case "{{$object.GQLType}}.{{$field.GQLName}}":
+				    if e.complexity.{{$object.GoType}}.{{$field.GoFieldName}} == nil {
+						break
+					}
+					{{ if . }}args := map[string]interface{}{} {{end}}
+					{{ range $i, $arg := $field.Args }}
+						var arg{{$i}} {{$arg.Signature }}
+						if tmp, ok := rawArgs[{{$arg.GQLName|quote}}]; ok {
+							var err error
+							{{$arg.Unmarshal (print "arg" $i) "tmp" }}
+							if err != nil {
+								return 0, false
+							}
+						}
+						args[{{$arg.GQLName|quote}}] = arg{{$i}}
+					{{ end }}
+					return e.complexity.{{$object.GoType}}.{{$field.GoFieldName}}(childComplexity{{if $field.Args}}, {{$field.ComplexityArgs}} {{end}}), true
+			{{ end }}
+		{{ end }}
+	{{ end }}
+	}
+	return 0, false
+}
+
 func (e *executableSchema) Query(ctx context.Context, op *ast.OperationDefinition) *graphql.Response {
 	{{- if .QueryRoot }}
 		ec := executionContext{graphql.GetRequestContext(ctx), e}

graphql/exec.go

@@ -10,6 +10,7 @@ import (
 type ExecutableSchema interface {
 	Schema() *ast.Schema
 
+	Complexity(typeName, fieldName string, childComplexity int, args map[string]interface{}) (int, bool)
 	Query(ctx context.Context, op *ast.OperationDefinition) *Response
 	Mutation(ctx context.Context, op *ast.OperationDefinition) *Response
 	Subscription(ctx context.Context, op *ast.OperationDefinition) func() *Response

handler/graphql.go

@@ -8,6 +8,7 @@ import (
 	"net/http"
 	"strings"
 
+	"github.com/99designs/gqlgen/complexity"
 	"github.com/99designs/gqlgen/graphql"
 	"github.com/gorilla/websocket"
 	"github.com/vektah/gqlparser"
@@ -23,11 +24,12 @@ type params struct {
 }
 
 type Config struct {
-	upgrader       websocket.Upgrader
-	recover        graphql.RecoverFunc
-	errorPresenter graphql.ErrorPresenterFunc
-	resolverHook   graphql.FieldMiddleware
-	requestHook    graphql.RequestMiddleware
+	upgrader        websocket.Upgrader
+	recover         graphql.RecoverFunc
+	errorPresenter  graphql.ErrorPresenterFunc
+	resolverHook    graphql.FieldMiddleware
+	requestHook     graphql.RequestMiddleware
+	complexityLimit int
 }
 
 func (c *Config) newRequestContext(doc *ast.QueryDocument, query string, variables map[string]interface{}) *graphql.RequestContext {
@@ -74,6 +76,14 @@ func ErrorPresenter(f graphql.ErrorPresenterFunc) Option {
 	}
 }
 
+// ComplexityLimit sets a maximum query complexity that is allowed to be executed.
+// If a query is submitted that exceeds the limit, a 422 status code will be returned.
+func ComplexityLimit(limit int) Option {
+	return func(cfg *Config) {
+		cfg.complexityLimit = limit
+	}
+}
+
 // ResolverMiddleware allows you to define a function that will be called around every resolver,
 // useful for tracing and logging.
 func ResolverMiddleware(middleware graphql.FieldMiddleware) Option {
@@ -184,6 +194,14 @@ func GraphQL(exec graphql.ExecutableSchema, options ...Option) http.HandlerFunc
 			}
 		}()
 
+		if cfg.complexityLimit > 0 {
+			queryComplexity := complexity.Calculate(exec, op, vars)
+			if queryComplexity > cfg.complexityLimit {
+				sendErrorf(w, http.StatusUnprocessableEntity, "query has complexity %d, which exceeds the limit of %d", queryComplexity, cfg.complexityLimit)
+				return
+			}
+		}
+
 		switch op.Operation {
 		case ast.Query:
 			b, err := json.Marshal(exec.Query(ctx, op))

handler/stub.go

@@ -25,6 +25,10 @@ func (e *executableSchemaStub) Schema() *ast.Schema {
 	`})
 }
 
+func (e *executableSchemaStub) Complexity(typeName, field string, childComplexity int, args map[string]interface{}) (int, bool) {
+	return 0, false
+}
+
 func (e *executableSchemaStub) Query(ctx context.Context, op *ast.OperationDefinition) *graphql.Response {
 	return &graphql.Response{Data: []byte(`{"name":"test"}`)}
 }