Execute GraphQL Query

//native

/**

 * Execute GraphQL Query

 * Run any Wiz GraphQL query or mutation with optional variables. The escape hatch for surfaces not covered by a dedicated action.

 */

export async function main(

  auth: RT.Wiz,

  query: string,

  variables: { [key: string]: any } | undefined,

  operation_name: string | undefined

) {

  const tokenResponse = await fetch(

    auth.auth_url || "https://auth.app.wiz.io/oauth/token",

    {

      method: "POST",

      headers: { "Content-Type": "application/x-www-form-urlencoded" },

      body: new URLSearchParams({

        grant_type: "client_credentials",

        audience: auth.audience || "wiz-api",

        client_id: auth.client_id,

        client_secret: auth.client_secret,

      }),

    }

  )

  if (!tokenResponse.ok) {

    throw new Error(`${tokenResponse.status} ${await tokenResponse.text()}`)

  }

  const { access_token } = (await tokenResponse.json()) as {

    access_token: string

  }

  const response = await fetch(auth.api_endpoint, {

    method: "POST",

    headers: {

      Authorization: `Bearer ${access_token}`,

      "Content-Type": "application/json",

      Accept: "application/json",

    },

    body: JSON.stringify({

      query,

      variables: variables || {},

      operationName: operation_name || null,

    }),

  })

  if (!response.ok) {

    throw new Error(`${response.status} ${await response.text()}`)

  }

  const result = (await response.json()) as { data?: any; errors?: any }

  if (result.errors) {

    throw new Error(JSON.stringify(result.errors))

  }

  return result.data

}