Adding Support for GraphQL Persisted Queries

[typesafekaty]

I thought this discussion from CraftCMS perfectly communicated my points so I'll be referencing them here:

Description

The concept of persisted queries in GraphQL is essentially that you keep track of your queries in an allow-list with queries mapped to IDs. When executing the query, instead of passing the entire thing, you just pass a queryId. The GraphQL server is then responsible for looking up that query and ensuring it's allowed. Generally, the process of generating the allow list is automated using a frontend build tool to extract queries and generate the allow-list for you, replacing queries with their IDs in your compiled code.

Benefits

• Makes it easier to utilize GraphQL as an API in production since you don't need to worry about permissions leaking data
• Smaller client requests since the payload only needs to carry the query ID
• Smaller production assets since your queries would be replaced with IDs
• Improves cachability of http requests since not all full-length queries can fit into GET request parameters to be cached on CDNs