updated Introspection taken care

Signed-off-by: raovishal <[email protected]>

Author: Vishal-Rao-SU

qudini-reactive-graphql/src/main/java/com/qudini/reactive/graphql/ReactiveGraphQLAutoConfiguration.java

@@ -13,6 +13,7 @@
 import graphql.schema.idl.SchemaParser;
 import graphql.schema.idl.TypeDefinitionRegistry;
 import graphql.schema.idl.TypeRuntimeWiring;
+import graphql.schema.visibility.NoIntrospectionGraphqlFieldVisibility;
 import lombok.SneakyThrows;
 import org.springframework.beans.factory.ListableBeanFactory;
 import org.springframework.beans.factory.annotation.Value;
@@ -68,7 +69,7 @@ public TypeDefinitionRegistry graphqlRegistry(@Value("classpath:schema.graphql")
     @Bean
     @ConditionalOnMissingBean
     public RuntimeWiring graphqlWiring(Gom gom, Collection<Scalar<?, ?, ?>> scalars, Collection<TypeRuntimeWiring> wirings) {
-        var wiring = RuntimeWiring.newRuntimeWiring();
+        var wiring = RuntimeWiring.newRuntimeWiring().fieldVisibility(NoIntrospectionGraphqlFieldVisibility.NO_INTROSPECTION_FIELD_VISIBILITY);
         scalars.stream().map(Scalar::build).forEach(wiring::scalar);
         wirings.forEach(wiring::type);
         gom.decorateRuntimeWiringBuilder(wiring);
@@ -98,5 +99,4 @@ public RouterFunction<ServerResponse> graphqlRouter(GraphQLHandler graphqlHandle
                 graphqlHandler::postJson
         );
     }
-
 }

qudini-reactive-graphql/src/main/java/com/qudini/reactive/graphql/http/GraphQLHandler.java

@@ -4,8 +4,11 @@
 import com.qudini.reactive.logging.Log;
 import graphql.ExecutionResult;
 import graphql.GraphQL;
+import graphql.analysis.MaxQueryComplexityInstrumentation;
 import graphql.analysis.MaxQueryDepthInstrumentation;
 import graphql.execution.DataFetcherExceptionHandler;
+import graphql.execution.instrumentation.ChainedInstrumentation;
+import graphql.execution.instrumentation.Instrumentation;
 import graphql.schema.GraphQLSchema;
 import lombok.RequiredArgsConstructor;
 import org.dataloader.DataLoaderRegistry;
@@ -16,6 +19,7 @@
 import reactor.core.publisher.Mono;
 import reactor.util.context.ContextView;
 
+import java.util.Arrays;
 import java.util.Map;
 
 import static com.qudini.utils.MoreTuples.onBoth;
@@ -46,7 +50,7 @@ private Mono<Map<String, Object>> execute(ContextView context, GraphQLRequest re
         var input = request.toExecutionInput(context, registry);
         var graphql = GraphQL
                 .newGraphQL(schema)
-                .instrumentation(new MaxQueryDepthInstrumentation(maxDepth))
+                .instrumentation(instrumentation())
                 .defaultDataFetcherExceptionHandler(exceptionHandler)
                 .build();
         return Log
@@ -60,4 +64,13 @@ private Mono<ServerResponse> respond(Mono<Map<String, Object>> body) {
                 .body(body, ParameterizedTypeReference.forType(Map.class));
     }
 
+    public Instrumentation instrumentation() {
+        return new ChainedInstrumentation(
+                Arrays.asList(
+                        new MaxQueryDepthInstrumentation(maxDepth), // Limit query depth to maxDepth
+                        new MaxQueryComplexityInstrumentation(maxDepth) // Limit query complexity to maxDepth
+                )
+        );
+    }
+
 }