Upgrade packages + resolve vulnerabilities

api/src/ApolloServer.js

@@ -4,13 +4,6 @@ import { applyMiddleware as applyGraphQLMiddleware } from 'graphql-middleware'
 import { moduleAuth } from './middleware'
 import { logger } from './logger'
 
-/**
- *
- * @description Creates an Apollo Server. Setup based on `vue-cli-plugin-apollo`.
- * @param {Object} app Express application
- * @param {Object} options Apollo options
- * @returns {Object} HTTP Server
- */
 export default function createApolloServer(
   app,
   {
@@ -54,6 +47,7 @@ export default function createApolloServer(
     tracing: true,
     cacheControl: true,
     introspection: true,
+    playground: true,
     engine: engineKey ? { apiKey: engineKey } : false,
     dataSources,
     // Resolvers context in POST requests

api/src/directives/index.js

@@ -1,5 +1,5 @@
 import { SchemaDirectiveVisitor } from 'apollo-server-express'
-import _get from 'lodash.get'
+import _get from 'lodash/get'
 import { logger, AuthenticationError, DatabaseError } from '../logger'
 
 const memberLocationOnContext = 'request.user'

api/src/graphql/resolvers/index.js

@@ -1,4 +1,4 @@
-import merge from 'lodash.merge'
+import merge from 'lodash/merge'
 
 import { resolvers as queryResolvers } from './Query'
 import { resolvers as mutationResolvers } from './Mutation'

api/src/index.js

@@ -1,5 +1,5 @@
-import '@babel/polyfill'
-require('dotenv').config();
+require("@babel/register");
+require("@babel/polyfill");
 import express from 'express'
 import createApolloServer from './ApolloServer'
 import { formatError } from './errors'
@@ -24,12 +24,13 @@ import wrongPreshared from './errors/notAllowed.json'
 
 const GRAPHQL_ENDPOINT = '/graphql'
 const GRAPHQL_SUBSCRIPTIONS = '/graphql'
-const PORT = 4001
-const NODE_ENV = 'development'
+const PORT = process.env.PORT
+const NODE_ENV = process.env.NODE_ENV
+const SCHEMA_PATH = process.env.SCHEMA_PATH
 
 const db = new Prisma({
   fragmentReplacements: extractFragmentReplacements(resolvers),
-  typeDefs: 'src/generated/prisma.graphql',
+  typeDefs: importSchema(SCHEMA_PATH),
   endpoint: process.env.PRISMA_ENDPOINT,
   secret: process.env.PRISMA_SECRET,
   debug: false