Global scope for react query keys?

[florianmartens]

In most apps there is the need to scope cached queries by default. Let's say you allow users to use multiple accounts. You'd probably want to scope each and every query to the account the user uses.

If queries are not scoped by default, we have to pass the accountId to every invocation of useQuery like so: useQuery([accountId, ...]).

I'd love to know if queryFn can be bound to a global key like this.

<QueryClientProvider client={queryClient} defaultKey={[accountId]}>{...children...}</QueryClientProvider>

[TkDodo]

I guess accountId will likely needed to be passed to the actual network request in the end - otherwise, why would it be part of the key?

The best way to achieve this is to either make a default query function that adds the accountId (but then it wouldn't be part of the key, so no refetches when it changes, which is not good), or, make accountId globally available, e.g. via react context. So instead of passing defaultKey={[accountId]}, you create another context and add it there. Then, you can compose your custom hook:

const accountId = useAccountContext()
useQuery([accountId, somethingElse], () => ...)

or, make a hook that creates query keys and uses that context:

const useQueryKeys = () => {
  const accountId = useAccountContext()  

  return {
    somethingElse: [accountId, somethingElse]
  }
}

useQuery(useQueryKeys().somethingElse, () => ...)

I like the last approach best because it goes well with the concept of query key factories: https://tkdodo.eu/blog/effective-react-query-keys#use-query-key-factories

[wpp-roman-gryndii]

@TkDodo I am working on the app, that could be in multiple instances under the core application
When I am switching between app instances query data duplicates

app1: 'QUERY_1, QUERY_2'
app2: 'QUERY_1, QUERY_2'

in app2 I see data from app1
query data should be somehow scoped, it would be nice to have optional:

<QueryClientProvider queryStorageId={appId} />

or scope query data somehow

UPDATE: Oh, don't mind, just use solution from @lauri865 for such cases, tnx 🙌

[lauri865]

If anyone else is looking for a solution to this, I've found two after some hours of research:

1. (inspired by another repo that needed this): a custom queryKeyHashFn under defaultOptions.queries.queryKeyHashFn that prefixes all queryKeys.
2. Initiating a new QueryClient instance per tenant, and persisting data under a different key per tenant. Also need to force the QueryClient Provider to reload by supplying the namespace id with a key prop.

We went with the 1st solution for now, but if we need more customization down the line, we might switch over to the 2nd solution. As a bonus, it also works with trpc out of the box.

Overall, since we're heavily leaning into Postgres RLS for tenant data isolation, we've significantly reduced the surface area for accidentally leaking tenant data, and made it virtually impossible, as there's a single point of failure, and if that fails, we return no data whatsoever. Plus we run tests against data, instead of testing every endpoint. The source of truth lies in the JWT, not developers making sure to properly prefix and filter things.

Now with the above setup, there's also a single testable point of failure in the UI, whereby we can guarantee globally that we don't accidentally display any cached data across tenants. Manual namespacing at scale can be error prone, and significantly increases the needed testing surface area (even if it's mostly about UX in the frontend case, than data security).

[AlonMiz]

i wonder about the case when the app is still initializing,
the tenant id is still null, but there are active queries.
then, these queries can still go out as soon as the auth is enabled, but the key would be the null one
so you will end up with two requests for the same resources, and two different query keys, therefore, two cache entries for the same resource.
i read that defaultOptions cannot be changed for active queries, so this is still an issue for the above case.
is there any way to force disable these requests while there's no tenant id available (defaultOptions.queries.disable is not enough as it's being overriden by specific queries)?

[spookyuser]

Hey @lauri865 this sounds amazing, I'm very curious how you ended up doing this with querykeyHashFn, I just can't figure out how to elegantly get things like the jwt in the hashFn. If you have any snippets you could share I'd really appreciate it - Thanks so much!