adding authorization

src/clj/auto_ap/routes/graphql.clj

@@ -3,6 +3,7 @@
             [auto-ap.routes.utils :refer [wrap-secure wrap-spec]]
             [auto-ap.entities.companies :as entity]
             [auto-ap.graphql :as ql]
+            [buddy.auth :refer [throw-unauthorized]]
             [clojure.edn :as edn]
             [compojure.core :refer [GET PUT context defroutes
                                     wrap-routes]]))
@@ -12,6 +13,8 @@
   (wrap-routes
    (context "/graphql" []
             (GET "/" {:keys [query-params] :as r}
+                 (when (= "none" (:role (:identity r)))
+                   (throw-unauthorized))
 
                  (let [variables (some-> (query-params "variables")
                                          edn/read-string)]