[TILES-PW-3] PLU-672: backend mutations

[pregnantboy]

Changes

Added new GraphQL mutations to support new feature:
setTableViewPassword: computes password hash and nonce to store in db. Will only succeed if Shareable links are enabled

deleteTableViewPassword: delete password hash and nonce

verifyTableViewPassword: verifies the JWT view token.

deleteShareableTableLink: should also delete password hash and nonce

How to test?

Since there is no frontend, you have to use the Apollo Server API explorer at http://localhost:3001/graphql
Prerequisite,

1. you should be logged in to localhost:3001
2. Created a tile

setTableViewPassword

mutation SetTableViewPassword($input: SetTableViewPasswordInput!) {
  setTableViewPassword(input: $input)
}

variables
{
  "input": {
    "tableId": "<TABLE_ID>",
    "password": "123"
  }
}

1. When shareable link is disabled, it should fail
2. When shareable link is enabled, it should succeed

deleteTableViewPassword

mutation DeleteTableViewPassword($tableId: ID!) {
  deleteTableViewPassword(tableId: $tableId)
}
variables
{
  "tableId": "<TABLE_ID>"
}

deleteShareableLink

mutation DeleteShareableTableLink($tableId: ID!) {
  deleteShareableTableLink(tableId: $tableId)
}
variables
{
  "tableId": "<TABLE_ID>"
}

verifyTableViewPassword

mutation VerifyTableViewPassword($input: VerifyTableViewPasswordInput!) {
  verifyTableViewPassword(input: $input)
}
variables
{
  "input": {
    "tableId": "<TABLE_ID",
    "password": "123"
  }
}
headers:
x-tiles-view-key: <SHAREABLE_LINK_SECOND_PART>

[pregnantboy]

• [TILES-PW-8] PLU-672: PR comments and styling changes #1463
• [TILES-PW-7] PLU-672: additional security #1459
• [TILES-PW-6] PLU-672: tiles password settings on frontend #1458
• [TILES-PW-5] PLU-672: (frontend) password prompt page #1457
• [TILES-PW-5] PLU-672: Error handling refactor #1456
• [TILES-PW-4] PLU-672: auth for mutations #1452
• [TILES-PW-3] PLU-672: backend mutations #1451 👈 (View in Graphite)
• [TILES-PW-2] PLU-672: crypto-related helpers #1450
• [TILES-PW-1] PLU-672: DB schema #1449
• develop-v2

This stack of pull requests is managed by Graphite. Learn more about stacking.

[linear]

PLU-672 Password protection for Tile shareable link

[kevinkim-ogp]

lgtm!
saw that the mutations are exposed in the next PR
the mutations are not exported from the tiles mutations index file packages/backend/src/graphql/mutations/tiles/index.ts

other than that, mutations work as intended!

[pregnantboy]

Merge activity

• Mar 10, 6:25 AM UTC: A user started a stack merge that includes this pull request via Graphite.
• Mar 10, 6:27 AM UTC: A user started a stack merge that includes this pull request via Graphite.
• Mar 10, 6:29 AM UTC: The Graphite merge of this pull request was cancelled.
• Mar 10, 6:31 AM UTC: Graphite rebased this pull request as part of a merge.
• Mar 10, 6:31 AM UTC: @pregnantboy merged this pull request with Graphite.