Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@graphile-contrib/pg-many-to-many
Advanced tools
Add connection fields for many-to-many relations
This Graphile Engine plugin adds connection fields for many-to-many relations.
Requires
postgraphile@^4.5.0
orgraphile-build-pg@^4.5.0
Example:
{
allPeople {
nodes {
personName
# 👇 many-to-many relation
teamsByTeamMemberPersonIdAndTeamId {
nodes {
teamName
}
}
}
}
}
Append this plugin and the additional fields will be added to your schema.
yarn add postgraphile
yarn add @graphile-contrib/pg-many-to-many
npx postgraphile --append-plugins @graphile-contrib/pg-many-to-many
const express = require("express");
const { postgraphile } = require("postgraphile");
const PgManyToManyPlugin = require("@graphile-contrib/pg-many-to-many");
const app = express();
app.use(
postgraphile(process.env.DATABASE_URL, "app_public", {
appendPlugins: [PgManyToManyPlugin],
graphiql: true,
})
);
app.listen(5000);
To exclude certain many-to-many fields from appearing in your GraphQL schema, you can use @omit manyToMany
smart comments on constraints and tables.
Here is an example of using a smart comment on a constraint:
create table p.foo (
id serial primary key,
name text not null
);
create table p.bar (
id serial primary key,
name text not null
);
create table p.qux (
foo_id int constraint qux_foo_id_fkey references p.foo (id),
bar_id int constraint qux_bar_id_fkey references p.bar (id),
primary key (foo_id, bar_id)
);
-- `Foo` and `Bar` would normally have `barsBy...` and `foosBy...` fields,
-- but this smart comment causes the constraint between `qux` and `bar`
-- to be ignored, preventing the fields from being generated.
comment on constraint qux_bar_id_fkey on p.qux is E'@omit manyToMany';
Here is an example of using a smart comment on a table:
create table p.foo (
id serial primary key,
name text not null
);
create table p.bar (
id serial primary key,
name text not null
);
create table p.corge (
foo_id int constraint corge_foo_id_fkey references p.foo (id),
bar_id int constraint corge_bar_id_fkey references p.bar (id),
primary key (foo_id, bar_id)
);
-- `Foo` and `Bar` would normally have `barsBy...` and `foosBy...` fields,
-- but this smart comment causes `corge` to be excluded from consideration
-- as a junction table, preventing the fields from being generated.
comment on table p.corge is E'@omit manyToMany';
To avoid naming conflicts, this plugin uses a verbose naming convention (e.g. teamsByTeamMemberTeamId
), similar to how related fields are named by default in PostGraphile v4. You can override this by writing a custom inflector plugin or by using smart comments in your SQL schema.
Writing a custom inflector plugin gives you full control over the GraphQL field names. Here is an example plugin that shortens the field names to just the table name (producing e.g. teams
):
:warning: Warning: Simplifying the field names as shown below will lead to field name conflicts if your junction table has multiple foreign keys referencing the same table. You will need to customize the inflector function to resolve the conflicts.
const { makeAddInflectorsPlugin } = require("graphile-utils");
module.exports = makeAddInflectorsPlugin(
{
manyToManyRelationByKeys(
_leftKeyAttributes,
_junctionLeftKeyAttributes,
_junctionRightKeyAttributes,
_rightKeyAttributes,
_junctionTable,
rightTable,
_junctionLeftConstraint,
junctionRightConstraint
) {
if (junctionRightConstraint.tags.manyToManyFieldName) {
return junctionRightConstraint.tags.manyToManyFieldName;
}
return this.camelCase(
`${this.pluralize(this._singularizedTableName(rightTable))}`
);
},
manyToManyRelationByKeysSimple(
_leftKeyAttributes,
_junctionLeftKeyAttributes,
_junctionRightKeyAttributes,
_rightKeyAttributes,
_junctionTable,
rightTable,
_junctionLeftConstraint,
junctionRightConstraint
) {
if (junctionRightConstraint.tags.manyToManySimpleFieldName) {
return junctionRightConstraint.tags.manyToManySimpleFieldName;
}
return this.camelCase(
`${this.pluralize(this._singularizedTableName(rightTable))}-list`
);
},
},
true // Passing true here allows the plugin to overwrite existing inflectors.
);
For more information on custom inflector plugins, see the makeAddInflectorsPlugin documentation.
The @manyToManyFieldName
and @manyToManySimpleFieldName
smart comments allow you to override the field names generated by this plugin.
For example, to rename the Connection field from teamsByTeamMemberTeamId
to teams
:
comment on constraint membership_team_id_fkey on p.membership is E'@manyToManyFieldName teams';
To rename both the Connection and simple collection fields (assuming simple collections are enabled):
comment on constraint membership_team_id_fkey on p.membership is E'@manyToManyFieldName teams\n@manyToManySimpleFieldName teamsList';
FAQs
Add connection fields for many-to-many relations
The npm package @graphile-contrib/pg-many-to-many receives a total of 3,206 weekly downloads. As such, @graphile-contrib/pg-many-to-many popularity was classified as popular.
We found that @graphile-contrib/pg-many-to-many demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.