Objective: I want my API gateway to retrieve the HTTPOnly cookies returned by my REST endpoints and forward them to the frontend. Additionally, the frontend should have the capability to transmit these cookies as well.
httpO=httponly
SPA(react) apiGateway(apolloQL) restEndpoint
httpO-cookies----> <-----(httpO)cookies-----> <-----(httpO)cookies
Currently, the resolvers can detect the "set-cookies" in the response from the endpoints, but the headers are not maintained throughout the response lifecycle.
const apolloServer: ApolloServer = new ApolloServer({
context: ({ res }) => {
// console.log(res,"res");
return ({
res
});
},
formatError,
resolvers,
typeDefs,
formatResponse: (response: GraphQLResponse) => {
console.log(response.http?.headers, "header?");
return {
headers: {
'Access-Control-Allow-Headers': 'Content-Type',
'Access-Control-Allow-Credentials': 'true',
},
data: response.data,
errors: response.errors,
};
}
});
An example of a resolver:
const signupUser = async (parent: any, args: any, context: any, info: any) => {
try {
const response = await UserService.createUser(args);
console.log(response , "response");
return response;
} catch (error) {
console.log(error
}
};
In this scenario, let's assume that UserService.createUser returns the entire response object, not just response.data.