feat(server): policy check query (#1760)

Author: soneda-yuya

server/e2e/common.go

@@ -19,6 +19,7 @@ import (
 	"github.com/reearth/reearth/server/internal/infrastructure/fs"
 	"github.com/reearth/reearth/server/internal/infrastructure/memory"
 	"github.com/reearth/reearth/server/internal/infrastructure/mongo"
+	"github.com/reearth/reearth/server/internal/infrastructure/policy"
 	"github.com/reearth/reearth/server/internal/usecase/gateway"
 	"github.com/reearth/reearth/server/internal/usecase/repo"
 	"github.com/reearth/reearthx/account/accountinfrastructure/accountmongo"
@@ -89,11 +90,13 @@ func initRepos(t *testing.T, useMongo bool, seeder Seeder) (repos *repo.Containe
 func initGateway() *gateway.Container {
 	if fr == nil {
 		return &gateway.Container{
-			File: lo.Must(fs.NewFile(afero.NewMemMapFs(), "https://example.com/")),
+			File:          lo.Must(fs.NewFile(afero.NewMemMapFs(), "https://example.com/")),
+			PolicyChecker: policy.NewPermissiveChecker(),
 		}
 	}
 	return &gateway.Container{
-		File: *fr,
+		File:          *fr,
+		PolicyChecker: policy.NewPermissiveChecker(),
 	}
 }
 

server/e2e/gql_workspace_policy_test.go

@@ -0,0 +1,85 @@
+package e2e
+
+import (
+	"fmt"
+	"testing"
+)
+
+// go test -v -run TestWorkspacePolicyCheck ./e2e/...
+func TestWorkspacePolicyCheck(t *testing.T) {
+	e, _ := StartGQLServerAndRepos(t, baseSeederUser)
+
+	// Test successful policy check for existing workspace
+	res := Request(e, uId1.String(), GraphQLRequest{
+		Query: fmt.Sprintf(`query {
+			workspacePolicyCheck(input: {workspaceId: "%s"}) {
+				workspaceId
+				enableToCreatePrivateProject
+			}
+		}`, wId1),
+	})
+
+	// Verify the response structure
+	res.Path("$.data.workspacePolicyCheck.workspaceId").IsEqual(wId1.String())
+	res.Path("$.data.workspacePolicyCheck.enableToCreatePrivateProject").IsBoolean()
+
+	// Test with non-existent workspace ID
+	nonExistentWorkspaceId := "01H4XCVR7QZJN0Z8V9XN9N9N9N"
+	res = Request(e, uId1.String(), GraphQLRequest{
+		Query: fmt.Sprintf(`query {
+			workspacePolicyCheck(input: {workspaceId: "%s"}) {
+				workspaceId
+				enableToCreatePrivateProject
+			}
+		}`, nonExistentWorkspaceId),
+	})
+
+	// Should return error for non-existent workspace
+	res.Path("$.errors[0].message").IsString()
+
+	// Test with invalid workspace ID format
+	res = Request(e, uId1.String(), GraphQLRequest{
+		Query: `query {
+			workspacePolicyCheck(input: {workspaceId: "invalid-id"}) {
+				workspaceId
+				enableToCreatePrivateProject
+			}
+		}`,
+	})
+
+	// Should return error for invalid ID format
+	res.Path("$.errors[0].message").IsString()
+}
+
+// Test policy check with different user permissions
+func TestWorkspacePolicyCheckPermissions(t *testing.T) {
+	e, _ := StartGQLServerAndRepos(t, baseSeederUser)
+
+	// Test with workspace owner
+	res := Request(e, uId1.String(), GraphQLRequest{
+		Query: fmt.Sprintf(`query {
+			workspacePolicyCheck(input: {workspaceId: "%s"}) {
+				workspaceId
+				enableToCreatePrivateProject
+			}
+		}`, wId1),
+	})
+
+	res.Path("$.data.workspacePolicyCheck.workspaceId").IsEqual(wId1.String())
+	res.Path("$.data.workspacePolicyCheck.enableToCreatePrivateProject").IsBoolean()
+	res.Path("$.data.workspacePolicyCheck.enableToCreatePrivateProject").IsEqual(true)
+
+	// Test with different user (should still work if they have access to the workspace)
+	res = Request(e, uId2.String(), GraphQLRequest{
+		Query: fmt.Sprintf(`query {
+			workspacePolicyCheck(input: {workspaceId: "%s"}) {
+				workspaceId
+				enableToCreatePrivateProject
+			}
+		}`, wId1),
+	})
+
+	res.Path("$.data.workspacePolicyCheck.workspaceId").IsEqual(wId1.String())
+	res.Path("$.data.workspacePolicyCheck.enableToCreatePrivateProject").IsBoolean()
+	res.Path("$.data.workspacePolicyCheck.enableToCreatePrivateProject").IsEqual(true)
+}

server/gql/workspace.graphql

@@ -60,6 +60,10 @@ input CreateWorkspaceInput {
   alias: String
 }
 
+input PolicyCheckInput {
+  workspaceId: ID!
+}
+
 input UpdateWorkspaceInput {
   workspaceId: ID!
   name: String!
@@ -93,6 +97,11 @@ type CreateWorkspacePayload {
   workspace: Workspace!
 }
 
+type PolicyCheckPayload {
+  workspaceId: ID!
+  enableToCreatePrivateProject: Boolean!
+}
+
 type UpdateWorkspacePayload {
   workspace: Workspace!
 }
@@ -113,7 +122,9 @@ type DeleteWorkspacePayload {
   workspaceId: ID!
 }
 
-#extend type Query{ }
+extend type Query {
+  workspacePolicyCheck(input: PolicyCheckInput!): PolicyCheckPayload
+}
 
 extend type Mutation {
   createWorkspace(input: CreateWorkspaceInput!): CreateWorkspacePayload