New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

sofa-api

Package Overview
Dependencies
Maintainers
1
Versions
120
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

sofa-api

Create REST APIs with GraphQL

  • 0.0.2
  • Source
  • npm
  • Socket score

Version published
Weekly downloads
11K
decreased by-5.02%
Maintainers
1
Weekly downloads
 
Created
Source

Sofa

npm version code style: prettier renovate-app badge

The best way to create REST APIs (is GraphQL).

Installation

yarn add sofa-api
# or
npm install sofa-api

Getting Started

The most basic example possible:

import sofa from 'sofa-api';
import express from 'express';

const app = express();

app.use(
  '/api',
  sofa({
    schema,
  })
);

// GET /api/users
// GET /api/messages

How it works

Sofa takes your GraphQL Schema, looks for available queries, mutations and subscriptions and turns all of that into REST API.

Given the following schema:

type User {
  id: ID
  name: String
}

type Query {
  chat(id: ID): Chat
  chats: [Chat]
  me: Chat
}

Routes that are being generated:

GET /chat/:id
GET /chats
GET /me

Nested data and idea behind Models

Sofa treats some types differently than others, those are called Models.

The idea behind Models is to not expose full objects in every response, especially if it's a nested, not first-level data.

For example, when fetching a list of chats you don't want to include all messages in the response, you want them to be just IDs (or links). Those messages would have to have their own endpoint. We call this type of data, a Model. In REST you probably call them Resources.

In order to treat particular types as Models you need to provide two queries, one that exposes a list and the other to fetch a single entity. The model itself has to have an id field. Those are the only requirements.

# Message is treated as a Model
type Query {
  messages: [Message]
  message(id: ID): Message
}

type Message {
  id: ID
  # other fields ...
}

Provide a Context

In order for Sofa to resolve operations based on a Context, you need te be able to provide some. Here's how you do it:

api.use(
  '/api',
  sofa({
    schema,
    async context({ req }) {
      return {
        req,
        ...yourContext,
      };
    },
  })
);

You can pass a plain object or a function.

Use full responses instead of IDs

There are some cases where sending a full object makes more sense than passing only the ID. Sofa allows you to easily define where to ignore the default behavior:

api.use(
  '/api',
  sofa({
    schema,
    ignore: ['Message.author'],
  })
);

Whenever Sofa tries to resolve an author of a message, instead of exposing an ID it will pass whole data.

Pattern is easy: Type:field or Type

Custom execute phase

By default, Sofa uses graphql function from graphql-js to turn an operation into data but it's very straightforward to pass your own logic. Thanks to that you can even use a remote GraphQL Server (with Fetch or through Apollo Links).

api.use(
  '/api',
  sofa({
    schema,
    async execute(args) {
      return yourOwnLogicHere(args);
    },
  })
);

OpenAPI and Swagger

Thanks to GraphQL's Type System Sofa is able to generate OpenAPI (Swagger) definitions out of it. Possibilities are endless here. You get all the information you need in order to write your own definitions or create a plugin that follows any specification.

import sofa, { OpenAPI } from 'sofa-api';

const openApi = OpenAPI({
  schema,
  info: {
    title: 'Example API',
    version: '3.0.0',
  },
});

app.use(
  '/api',
  sofa({
    schema,
    onRoute(info) {
      openApi.addRoute(info);
    },
  })
);

// writes every recorder route
openApi.save('./swagger.yml');

License

MIT © Uri Goldshtein

Keywords

FAQs

Package last updated on 16 Jan 2019

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc