Arguments Empty When Trying Authorize

[andrejohansson]

I'm trying to authorize a field by validating it´s input arguments in a custom policy. My policy gets executed correctly but the Arguments property of the AuthorizationContext variable is always empty. What do I need to do in order to get this populated?

Field Definition

            Field<DeviceContextType>(
                name: "deviceContext",
                description: "Get device context data by id.",
                arguments: new QueryArguments(
                    new QueryArgument<IdGraphType> {Name = "id"},
                    new QueryArgument<IdGraphType> {Name = "organizationId"}
                ),
                resolve: context => new DeviceContext
                {
                   // my dummy object here
                }
            ).AuthorizeWith<DeviceQueryPolicy>();

DeviceQueryPolicy

    public class DeviceQueryPolicy : IAuthorizationPolicy
    {
        public DeviceQueryPolicy(IDependencyResolver resolver)
        {
            Requirements = new[]
            {
                new DeviceIdMatchOrganizationIdRequirement(resolver),
            };
        }

        public IEnumerable<IAuthorizationRequirement> Requirements { get; }
    }

DeviceIdMatchOrganizationIdRequirement

        public async Task Authorize(AuthorizationContext context)
        {
            // Arguments is always empty here! Why?
            if (!context.Arguments.ContainsKey("id") 
                || !context.Arguments.ContainsKey("organizationId")) {
                context.ReportError("Organization have no access rights to this device");
                return;
            }

Query

# Passing along two arguments
{
  devices {
    deviceContext(
      id: "26748243-9D9D-4E9A-A890-718A46D2C0D5"
      organizationId: "26748243-9D9D-4E9A-A890-718A46D2C0D5"
    ) {      
      active
    }
  }
}

[joemcbride]

AuthorizationContext.Arguments is probably a poorly named property. Those are actually the Input Variables and not the Arguments to the field.

[andrejohansson]

I think I'm mixing things up here, which Input variables do you mean?

[joemcbride]

@andrejohansson The variables that you pass in to a GraphQL Query.

https://graphql-dotnet.github.io/docs/getting-started/variables

[joacoleza]

Is there any way to access to the field's arguments from the AuthorizationContext in order to use them in the auth logic?

[joemcbride]

@joacoleza only if you use variables really. These rules run before execution so don’t have direct access to the arguments.

[joacoleza]

Ok. I guess that I will have to add that kind of authorization on the resolver itself, right?