some API cleanup

goinvo · Jan 3, 2024 · d0b3d77 · d0b3d77
1 parent 0a50fb8
commit d0b3d77
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 27 deletions.
diff --git a/app/controllers/graphql_controller.rb b/app/controllers/graphql_controller.rb
@@ -6,6 +6,8 @@ class GraphqlController < ApplicationController
   # but you'll have to authenticate your user separately
   # protect_from_forgery with: :null_session
 
+  skip_before_action :verify_authenticity_token
+
   def execute
     variables = prepare_variables(params[:variables])
     query = params[:query]

diff --git a/app/graphql/types/query_type.rb b/app/graphql/types/query_type.rb
@@ -25,12 +25,12 @@ def clients
 
     field :assignments, [Types::StaffPlan::AssignmentType], null: false
     def assignments
-      User.first.assignments.all
+      context[:current_user].assignments.all
     end
 
     field :users, [Types::StaffPlan::UserType], null: false
     def users
-      Company.first.users.all
+      context[:current_user].current_company.users.all
     end
   end
 end
diff --git a/app/graphql/types/staff_plan_query_type.rb b/app/graphql/types/staff_plan_query_type.rb