Option for disabling introspection query
See original GitHub issueHi. I am using this library for production.
I want to disable introspection query for security. I tried to customize the Class SchemaGenerator
, but it seems not working.
Is there any way to disable introspection quiery?
Issue Analytics
- State:
- Created 3 years ago
- Reactions:1
- Comments:5 (2 by maintainers)
Top Results From Across the Web
Why and how to disable introspection query for GraphQL APIs
To disable all types of introspection in this implementation, use the example below.
Read more >Disable GraphQL Introspection in graphql-java-tools
If you are using graphql-spring-boot, according to the graphql-java-tools README, you can disable the introspection query by setting the ...
Read more >Disabling introspection - gqlgen
Disable introspection for the whole server. To opt out of introspection globally you should build your own server with only the features ......
Read more >How to disable introspection query? · Issue #2692 - GitHub
but if all you want to do is, basically hide all introspection queries, then just return Task.FromResult(false) for everything and remove the ...
Read more >Introspection - Hot Chocolate - ChilliCream GraphQL Platform
We can disable introspection by calling AllowIntrospection() with a false argument on the IRequestExecutorBuilder . C#. services.
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Great question! Unfortunately currently we don’t provide configuration option to easily disable it so you would have to do it manually by modifying the generated GraphQL schema.
See https://www.graphql-java.com/documentation/v14/fieldvisibility/ for details.
@smyrick I think that we probably should add configuration option to
spring-server
to support it@dariuszkuc The field visibility is handled through the code registry so if we want a config option as part of spring server, that means we have to open the registry to be modified in external packages.