Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
graphql-subscriptions
Advanced tools
A port of apollo-graphql subscriptions for python, using gevent websockets, promises, and redis
A port of apollographql subscriptions for python, using gevent websockets and redis
This is an implementation of graphql subscriptions in Python. It uses the apollographql subscriptions-transport-ws and graphql-subscriptions packages as its basis. It currently implements a pubsub using redis-py and uses gevent-websockets for concurrency. It also makes heavy use of syrusakbary/promise python implementation to mirror the logic in the apollo-graphql libraries.
Meant to be used in conjunction with graphql-python / graphene server and apollo-client for graphql. The api is below, but if you want more information, consult the apollo graphql libraries referenced above, and specifcally as it relates to using their graphql subscriptions client.
Initial implementation. Good test coverage. Works with both Python 2 / 3.
$ pip install graphql-subscriptions
host
: Redis server instance url or IP (optional)port
: Redis server port (optional)args, kwargs
: Any additional position and keyword args will be passed to Redis-py constructor (optional)publish(trigger_name, message)
: Trigger name is a subscription or pubsub channel; message is the mutation object or message that will end up being passed to the subscription as the root_value; this method should be called inside of mutation resolve functionsubscribe(trigger_name, on_message_handler, options)
: Trigger name is a subscription or pubsub channel; on_message_handler is the callback that will be triggered on each mutation; this method is called by the subscription managerunsubscribe(sub_id)
: Sub_id is the subscription ID that is being tracked by the pubsub instance -- it is returned from the subscribe
method and called by the subscription managerwait_and_get_message()
: Called by the subscribe
method during the first subscription for the server; run in a separate greenlet and calls Redis get_message()
method to constantly poll for new messages on pubsub channelshandle_message(message)
: Called by the pubsub when a message is received on a subscribed channel; will check all existing pubsub subscriptons and then calls on_message_handler()
for all matchesschema
: Graphql schema instance (required)
pubsub
: Any pubsub instance with publish, subscribe, and unsubscribe methods (in this case an instance of the RedisPubsub class) (required)
setup_funcs
: Dictionary of setup functions that map from subscription name to a map of pubsub channel names and their filter functions; kwargs parameters are: query, operation_name, callback, variables, context, format_error, format_response, args, subscription_name
(optional)
example:
def new_user(**kwargs):
args = kwargs.get('args')
return {
'new_user_channel': {
'filter': lambda root, context: root.active == args.active
}
}
setup_funcs = {'new_user': new_user}
publish(trigger_name, payload)
: Trigger name is the subscription or pubsub channel; payload is the mutation object or message that will end up being passed to the subscription root_value; method called inside of mutation resolve functionsubscribe(query, operation_name, callback, variables, context, format_error, format_response)
: Called by SubscriptionServer upon receiving a new subscription from a websocket. Arguments are parsed by SubscriptionServer from the graphql subscription queryunsubscribe(sub_id)
: Sub_id is the subscription ID that is being tracked by the subscription manager instance -- returned from the subscribe()
method and called by the SubscriptionServersubscription_manager
: A subscripton manager instance (required).websocket
: The websocket object passed in from your route handler (required).keep_alive
: The time period, in seconds, that the server will send keep alive messages to the client. (optional)on_subscribe(message, subscription_parameters, websocket)
: Function to create custom params that will be used when resolving this subscription (optional)on_unsubscribe(websocket)
: Function that is called when a client unsubscribes (optional)on_connect(message_payload, websocket)
: Function that will be called when a client connects to the socket, called with the message_payload from the client, if the return value is an object, its elements will be added to the context. Return false or throw an exception to reject the connection. May return a Promise. (optional)on_disconnect(websocket)
: Function that called when a client disconnects (optional)on_open()
: Called when the socket first opens; checks for correct subscription protocol and initializes keep alive messageson_close(reason)
: Called when socket is closed; unsubscribes from subscriptions and deletes subscription objectson_message(message)
: provides main control flow for all messaging exchanged on the socket between server and client; parses initial message, checks for exceptions, responds to client and subscribes / unsubscribes socket to mutation channels, via pubsubunsubscribe(sub_id)
: Unsubscribes socket from subscriptions specified by clienttimer()
: Timer for sending keep alive messages to client; run in separate greenlet per socketsend_init_result(result), send_keep_alive(), send_subscription_data(sub_id, payload), send_subscription_fail(sub_id, payload), send_subscription_success(sub_id)
: convenience methods for sending different messages and payloads to clientfrom flask import Flask
from flask_sockets import Sockets
from graphql_subscriptions import (
SubscriptionManager,
RedisPubsub,
SubscriptionServer
)
app = Flask(__name__)
# using Flask Sockets here, but could use gevent-websocket directly
# to create a websocket app and attach it to flask app object
sockets = Sockets(app)
# instantiate pubsub -- this will be used to "publish" mutations
# and also to pass it into your subscription manager
pubsub = RedisPubsub()
# create schema using graphene or another python graphql library
# not showing models or schema design here for brevity
schema = graphene.Schema(
query=Query,
mutation=Mutation,
subscription=Subscription
)
# instantiate subscription manager object -- passing in schema and pubsub
subscription_mgr = SubscriptionManager(schema, pubsub)
# using Flask Sockets here -- on each new connection instantiate a
# subscription app / server -- passing in subscription manager and websocket
@sockets.route('/socket')
def socket_channel(websocket):
subscription_server = SubscriptionServer(subscription_mgr, websocket)
subscription_server.handle()
return []
if __name__ == "__main__":
# using a gevent webserver so multiple connections can be
# maintained concurrently -- gevent websocket spawns a new
# greenlet for each request and forwards the request to flask
# app or socket app, depending on request type
from geventwebsocket import WebSocketServer
server = WebSocketServer(('', 5000), app)
print ' Serving at host 0.0.0.0:5000...\n'
server.serve_forever()
Of course on the server you have to "publish" each time you have a mutation (in this case to a redis channel). That would look something like this (using graphene / sql-alchemy):
class AddUser(graphene.ClientIDMutation):
class Input:
username = graphene.String(required=True)
email = graphene.String()
ok = graphene.Boolean()
user = graphene.Field(lambda: User)
@classmethod
def mutate_and_get_payload(cls, args, context, info):
_input = args.copy()
del _input['clientMutationId']
new_user = UserModel(**_input)
db.session.add(new_user)
db.session.commit()
ok = True
# publish result of mutation to pubsub; check to see if there are any
# active subscriptions first; this implementation uses cPickle to serialize,
# so you could send regular python object; here I'm converting to a dict before
# publishing
if pubsub.subscriptions:
pubsub.publish('users', new_user.as_dict())
return AddUser(ok=ok, user=new_user)
class Subscription(graphene.ObjectType):
users = graphene_sqlalchemy.SQLAlchemyConnectionField(
User,
active=graphene.Boolean()
)
# mutation oject that was published will be passed as
# root_value of subscription
def resolve_users(self, args, context, info):
with app.app_context():
query = User.get_query(context)
return query.filter_by(id=info.root_value.get('id'))
First create create network interface and and client instances and then wrap them in a subscription client instance
import ReactDOM from 'react-dom'
import { ApolloProvider } from 'react-apollo'
import ApolloClient, { createNetworkInterface } from 'apollo-client'
import { SubscriptionClient, addGraphQLSubscriptions } from 'subscriptions-transport-ws'
import ChatApp from './screens/ChatApp'
const networkInterface = createNetworkInterface({
uri: 'http://localhost:5000/graphql'
})
const wsClient = new SubscriptionClient(`ws://localhost:5000/socket`, {
reconnect: true
})
const networkInterfaceWithSubscriptions = addGraphQLSubscriptions(
networkInterface,
wsClient,
)
const client = new ApolloClient({
dataIdFromObject: o => o.id,
networkInterface: networkInterfaceWithSubscriptions
})
ReactDOM.render(
<ApolloProvider client={client}>
<ChatApp />
</ApolloProvider>,
document.getElementById('root')
)
Build a simple component and then call subscribeToMore method on the returned data object from the inital graphql query
import React from 'react'
import { graphql } from 'react-apollo'
import gql from 'graphql-tag'
import ListBox from '../components/ListBox'
const SUBSCRIPTION_QUERY = gql`
subscription newUsers {
users(active: true) {
edges {
node {
id
username
}
}
}
}
`
const LIST_BOX_QUERY = gql`
query AllUsers {
users(active: true) {
edges {
node {
id
username
}
}
}
}
`
class ChatListBox extends React.Component {
componentWillReceiveProps(newProps) {
if (!newProps.data.loading) {
if (this.subscription) {
return
}
this.subscription = newProps.data.subscribeToMore({
document: SUBSCRIPTION_QUERY,
updateQuery: (previousResult, {subscriptionData}) => {
const newUser = subscriptionData.data.users.edges
const newResult = {
users: {
edges: [
...previousResult.users.edges,
...newUser
]
}
}
return newResult
},
onError: (err) => console.error(err)
})
}
}
render() {
return <ListBox data={this.props.data} />
}
}
const ChatListBoxWithData = graphql(LIST_BOX_QUERY)(ChatListBox)
export default ChatListBoxWithData
FAQs
A port of apollo-graphql subscriptions for python, using gevent websockets, promises, and redis
We found that graphql-subscriptions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.