Refactor grapqhl calls to use variable function

login_provider/db.py

@@ -15,23 +15,28 @@ class User(UserMixin):
         self._load_remote_user_info()
 
     def _load_remote_user_info(self):
-        querystring = '''{{
-        getUser(username: "{0}"){{
+        querystring = '''{
+        getUser(username: $username){
             email,
             active
-            }}}}'''.format(self.username).strip()
-        result = loads(graphql_client.execute(querystring))
+            }}'''
+        result = loads(graphql_client.execute(querystring, {'username': self.username}))
         if "data" in result:
             self.active = result["data"]["getUser"]["active"]
             self.email = result["data"]["getUser"]["email"]
 
     def _verify_password(self, password):
-        querystring = '''{{
+        querystring = '''{
         verifyPassword(
-            username: "{0}",
-            password: "{1}")
-            }}'''.format(self.username, password).strip()
-        result = loads(graphql_client.execute(querystring))
+            username: $username,
+            password: $password)
+            }}'''
+        result = loads(
+            graphql_client.execute(querystring, {
+                'username': self.username,
+                'password': password
+                })
+            )
         verified = False
         if "data" in result:
             verified = result["data"]["verifyPassword"]