Skip to content

Conversation

@rosalyntan
Copy link
Member

Description

Code sample

@gemini-code-assist
Copy link
Contributor

Summary of Changes

Hello @rosalyntan, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request introduces foundational support for Firebase Data Connect (FDC) resolvers within the Firebase Functions SDK. It provides a new entry point, onGraphRequest, for developers to easily set up and deploy GraphQL servers as HTTPS functions. By integrating with Apollo Server, this change offers a structured way to define GraphQL schemas and resolvers, streamlining the development of GraphQL-based APIs on Firebase.

Highlights

  • FDC Resolver Support: Introduced initial support for Firebase Data Connect (FDC) resolvers within the functions SDK, enabling the creation of GraphQL APIs.
  • GraphQL Server Function: Added a new onGraphRequest function that allows developers to define and deploy GraphQL servers as HTTPS functions.
  • Apollo Server Integration: Integrated ApolloServer and @as-integrations/express4 to provide robust GraphQL server capabilities, including schema definition and resolver mapping.
  • Dependency Updates: Updated package.json and package-lock.json to include @apollo/server and @as-integrations/express4 as optional peer dependencies, along with their transitive dependencies.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces initial support for Firebase Data Connect (FDC) resolvers via a new onGraphRequest function. This allows developers to create GraphQL endpoints. My review focuses on the implementation of onGraphRequest and its associated options. I've identified a critical issue with how optional dependencies are handled, which will cause runtime errors. I've also found some bugs related to handling server options, such as ignoring the customizable path and schema file path. Additionally, there are some areas for improvement in the options interface and a hardcoded value that needs clarification.

Comment on lines 388 to 415
if (
(await import("@apollo/server").then((mod) => !!mod)) &&
(await import("@as-integrations/express4").then((mod) => !!mod))
) {
const { ApolloServer } = await import("@apollo/server");
const { expressMiddleware } = await import("@as-integrations/express4");
const serverPromise = (async () => {
const app = express();
const server = new ApolloServer({
typeDefs: opts.schema,
resolvers: { Query: opts.resolvers.query, Mutation: opts.resolvers.mutation },
});

await server.start();

app.use("/graphql", cors(), json(), expressMiddleware(server));
return app;
})();
// Exports a function running a GraphQL server at the URL
// https://functionName-<PROJECT_NUMBER>.<REGION>.run.app/graphql
return onRequest(async (req, res) => {
const app = await serverPromise;
app(req, res);
});
} else {
// Handle case where optional-package is not available
console.warn("Optional feature requires 'optional-package'.");
}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

The current implementation for checking optional dependencies is flawed and will cause a runtime error.

  1. The function onGraphRequest is declared to return a Promise<HttpsFunction>, but the else block (lines 412-415) does not return a value. This is a type violation that will lead to issues.
  2. The condition (await import("...").then((mod) => !!mod)) will not work as expected. If a package is not installed, import() will throw an error, and the .then() callback will not be executed. The else block is effectively unreachable in the case of a missing dependency.

A more robust approach is to use a try...catch block to handle the dynamic imports. If the imports fail, you should throw an informative error to the developer.

For example:

try {
  const { ApolloServer } = await import("@apollo/server");
  const { expressMiddleware } = await import("@as-integrations/express4");
  // ... server setup
  return onRequest(...);
} catch (e) {
  throw new Error(
    "Optional dependencies '@apollo/server' and '@as-integrations/express4' are required for 'onGraphRequest'. Please install them to use this feature."
  );
}

This ensures that the function either successfully returns an HttpsFunction or clearly communicates the missing dependency issue to the developer.


await server.start();

app.use("/graphql", cors(), json(), expressMiddleware(server));
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The GraphQL server path is hardcoded to "/graphql". The GraphqlServerOptions interface defines a path property for this purpose, but it is not being used. This prevents developers from customizing the endpoint path as the options suggest.

      app.use(opts.path || "/graphql", cors(), json(), expressMiddleware(server));

Comment on lines 419 to 437
export interface GraphqlServerOptions {
/**
* A valid SDL string that represents the GraphQL server's schema.
* Either `schema` or `schemaFilePath` is required.
*/
schema: string;
/**
* A file path to a valid GraphQL schema.
* Either `schema` or `schemaFilePath` is required.
*/
schemaFilePath: string;
/**
* The path where the GraphQL server will be served on the Cloud Run function.
* If no path is provided, the server will be served at `/graphql`.
*/
path: string;
/** A map of functions that populate data for individual GraphQL schema fields. */
resolvers: GraphqlResolvers;
}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The GraphqlServerOptions interface has a few issues:

  1. schema and schemaFilePath are both marked as required (schema: string), but the documentation states that only one is required. They should be optional (schema?: string).
  2. The implementation of onGraphRequest only uses opts.schema and does not handle schemaFilePath. If a developer provides schemaFilePath, it will be ignored, and the server will likely fail if schema is not also provided. Logic to read the file content from schemaFilePath is missing.
  3. path is marked as required, but the documentation says it defaults to "/graphql", which implies it should be optional.

I recommend updating the interface and implementation to reflect the documented behavior.

export interface GraphqlServerOptions {
  /**
   * A valid SDL string that represents the GraphQL server's schema.
   * Either `schema` or `schemaFilePath` is required.
   */
  schema?: string;
  /**
   * A file path to a valid GraphQL schema.
   * Either `schema` or `schemaFilePath` is required.
   */
  schemaFilePath?: string;
  /**
   * The path where the GraphQL server will be served on the Cloud Run function.
   * If no path is provided, the server will be served at `/graphql`.
   */
  path?: string;
  /** A map of functions that populate data for individual GraphQL schema fields. */
  resolvers: GraphqlResolvers;
}

*/
export async function onGraphRequest(opts: GraphqlServerOptions): Promise<HttpsFunction> {
setGlobalOptions({
invoker: "<FDC-P4SA>@developer.gserviceaccount.com",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The invoker service account is hardcoded to "<FDC-P4SA>@developer.gserviceaccount.com". The angle brackets suggest this might be a placeholder value that was intended to be replaced. If this is a fixed, required value for Data Connect functions, it would be better to define it as a constant with a descriptive name to improve clarity and maintainability. If it's a placeholder, it should be resolved to a correct value or made configurable. Hardcoding placeholder-like values can lead to deployment or security issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant