-
|
Hi can some one show me how I can setup a whitelist for specific queries and mutations? I've been having a hard time location the query names in the request. I'm not finding the query at request.body.query and request.query.query that's sugguested in Apollo blog post for query whitelisting https://www.apollographql.com/blog/graphql/security/securing-your-graphql-api-from-malicious-queries/. |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 1 reply
-
|
In v3 document allow-listing can be achieved with a dedicated plugin: https://www.the-guild.dev/graphql/yoga-server/v3/features/persisted-operations In v2 you can access the incoming GraphQL parameters on the context object: https://www.the-guild.dev/graphql/yoga-server/docs/features/context#default-context |
Beta Was this translation helpful? Give feedback.
-
|
Thank you! |
Beta Was this translation helpful? Give feedback.
-
|
hi I can't install the repository via npm following this guide Yoga server thx npm resolution error reportWhile resolving: [email protected] Could not resolve dependency: Conflicting peer dependency: @graphql-tools/[email protected] "dependencies": { |
Beta Was this translation helpful? Give feedback.
In v3 document allow-listing can be achieved with a dedicated plugin: https://www.the-guild.dev/graphql/yoga-server/v3/features/persisted-operations
In v2 you can access the incoming GraphQL parameters on the context object: https://www.the-guild.dev/graphql/yoga-server/docs/features/context#default-context