1 files changed, 35 insertions, 31 deletions

diff --git a/src/services/vyos-http-api-server b/src/services/vyos-http-api-server
index cb4ce4072..06871f1d6 100755
--- a/src/services/vyos-http-api-server
+++ b/src/services/vyos-http-api-server
@@ -32,16 +32,14 @@ from fastapi.responses import HTMLResponse
 from fastapi.exceptions import RequestValidationError
 from fastapi.routing import APIRoute
 from pydantic import BaseModel, StrictStr, validator
-from starlette.datastructures import FormData, MutableHeaders
+from starlette.middleware.cors import CORSMiddleware
+from starlette.datastructures import FormData
 from starlette.formparsers import FormParser, MultiPartParser
 from multipart.multipart import parse_options_header
 
-from ariadne import make_executable_schema, load_schema_from_path, snake_case_fallback_resolvers
 from ariadne.asgi import GraphQL
 
 import vyos.config
-import vyos.defaults
-
 from vyos.configsession import ConfigSession, ConfigSessionError
 
 import api.graphql.state
@@ -69,11 +67,11 @@ def load_server_config():
     return config
 
 def check_auth(key_list, key):
-    id = None
+    key_id = None
     for k in key_list:
         if k['key'] == key:
-            id = k['id']
-    return id
+            key_id = k['id']
+    return key_id
 
 def error(code, msg):
     resp = {"success": False, "error": msg, "data": None}
@@ -223,10 +221,10 @@ responses = {
 def auth_required(data: ApiModel):
     key = data.key
     api_keys = app.state.vyos_keys
-    id = check_auth(api_keys, key)
-    if not id:
+    key_id = check_auth(api_keys, key)
+    if not key_id:
         raise HTTPException(status_code=401, detail="Valid API key is required")
-    app.state.vyos_id = id
+    app.state.vyos_id = key_id
 
 # override Request and APIRoute classes in order to convert form request to json;
 # do all explicit validation here, for backwards compatability of error messages;
@@ -613,18 +611,19 @@ def show_op(data: ShowModel):
 # GraphQL integration
 ###
 
-api.graphql.state.init()
-
-from api.graphql.graphql.mutations import mutation
-from api.graphql.graphql.directives import DataDirective
+def graphql_init(fast_api_app):
+    from api.graphql.bindings import generate_schema
 
-api_schema_dir = vyos.defaults.directories['api_schema']
-
-type_defs = load_schema_from_path(api_schema_dir)
+    api.graphql.state.init()
+    api.graphql.state.settings['app'] = app
 
-schema = make_executable_schema(type_defs, mutation, snake_case_fallback_resolvers, directives={"generate": DataDirective})
+    schema = generate_schema()
 
-app.add_route('/graphql', GraphQL(schema, debug=True))
+    if app.state.vyos_origins:
+        origins = app.state.vyos_origins
+        app.add_route('/graphql', CORSMiddleware(GraphQL(schema, debug=True), allow_origins=origins, allow_methods=("GET", "POST", "OPTIONS")))
+    else:
+        app.add_route('/graphql', GraphQL(schema, debug=True))
 
 ###
 
@@ -640,23 +639,28 @@ if __name__ == '__main__':
 
     try:
         server_config = load_server_config()
-    except Exception as e:
-        logger.critical("Failed to load the HTTP API server config: {0}".format(e))
+    except Exception as err:
+        logger.critical(f"Failed to load the HTTP API server config: {err}")
 
-    session = ConfigSession(os.getpid())
+    config_session = ConfigSession(os.getpid())
 
-    app.state.vyos_session = session
+    app.state.vyos_session = config_session
     app.state.vyos_keys = server_config['api_keys']
 
-    app.state.vyos_debug = True if server_config['debug'] == 'true' else False
-    app.state.vyos_strict = True if server_config['strict'] == 'true' else False
+    app.state.vyos_debug = server_config['debug']
+    app.state.vyos_strict = server_config['strict']
+    app.state.vyos_origins = server_config.get('cors', {}).get('origins', [])
 
-    api.graphql.state.settings['app'] = app
+    graphql_init(app)
 
     try:
-        uvicorn.run(app, host=server_config["listen_address"],
-                         port=int(server_config["port"]),
-                         proxy_headers=True)
-    except OSError as e:
-        logger.critical(f"OSError {e}")
+        if not server_config['socket']:
+            uvicorn.run(app, host=server_config["listen_address"],
+                             port=int(server_config["port"]),
+                             proxy_headers=True)
+        else:
+            uvicorn.run(app, uds="/run/api.sock",
+                             proxy_headers=True)
+    except OSError as err:
+        logger.critical(f"OSError {err}")
         sys.exit(1)