Allow-list does not work?

Hasura v1.0.0 on Heroku.

• Set HASURA_GRAPHQL_ENABLE_ALLOWLIST .env variable as “true”.
• Set X-Hasura-Role header as “user”.
• Add table with one field id (uuid).
• Insert rows to table.
• Add all select permissions for role “user”.
• Add query to “Allowed Queries” interface with name “get_try”:

query get_try {
  try {
    id
  }
}

• Reload metadata.

“NO SCHEMA AVAILABLE” in GraphiQL Explorer.

[0x777]

As @rikinsk pointed you, you can’t introspect the server after enabling allow-list unless the introspection query itself is added to the allow-list. This is the introspection query that is used typically by graphiql like interfaces:

query IntrospectionQuery {
  __schema {
    queryType { name }
    mutationType { name }
    subscriptionType { name }
    types {
      ...FullType
    }
    directives {
      name
      description
      locations
      args {
        ...InputValue
      }
    }
  }
}
fragment FullType on __Type {
  kind
  name
  description
  fields(includeDeprecated: true) {
    name
    description
    args {
      ...InputValue
    }
    type {
      ...TypeRef
    }
    isDeprecated
    deprecationReason
  }
  inputFields {
    ...InputValue
  }
  interfaces {
    ...TypeRef
  }
  enumValues(includeDeprecated: true) {
    name
    description
    isDeprecated
    deprecationReason
  }
  possibleTypes {
    ...TypeRef
  }
}
fragment InputValue on __InputValue {
  name
  description
  type { ...TypeRef }
  defaultValue
}
fragment TypeRef on __Type {
  kind
  name
  ofType {
    kind
    name
    ofType {
      kind
      name
      ofType {
        kind
        name
        ofType {
          kind
          name
          ofType {
            kind
            name
            ofType {
              kind
              name
              ofType {
                kind
                name
              }
            }
          }
        }
      }
    }
  }
}

I’m closing this issue, feel free to re-open this if you this doesn’t fix your issue.

[rikinsk]

@THPubs Can you clarify what exactly you are attempting to do and what’s not working?