feat: Add support for turning of csrf protection

Author: relekang

package.json

@@ -25,12 +25,7 @@
 		"type": "git",
 		"url": "git+https://github.com/relekang/graphql-rss-parser.git"
 	},
-	"files": [
-		"dist",
-		"cli.js",
-		"license",
-		"readme.md"
-	],
+	"files": ["dist", "cli.js", "license", "readme.md"],
 	"author": "Rolf Erik Lekang",
 	"license": "MIT",
 	"bugs": {

src/cli.ts

@@ -1,6 +1,15 @@
 import type { ApolloServer } from "@apollo/server";
 import { startStandaloneServer } from "@apollo/server/standalone";
-import { command, number, option, optional, run, string } from "cmd-ts";
+import {
+	boolean,
+	command,
+	flag,
+	number,
+	option,
+	optional,
+	run,
+	string,
+} from "cmd-ts";
 import type { Options } from "./index.js";
 
 export function cli({
@@ -44,14 +53,27 @@ export function cli({
 					return undefined;
 				},
 			}),
+			csrfPrevention: flag({
+				type: boolean,
+				short: "C",
+				long: "csrf-prevention",
+				description: "Toggle for CSRF prevention",
+				env: "CSRF_PREVENTION",
+				defaultValue() {
+					return false;
+				},
+			}),
 		},
 		handler: async (args) => {
 			const server = await createServer({
 				version,
 				sentryDsn: args.sentryDsn,
+				csrfPrevention: args.csrfPrevention,
 			});
 
-			console.log(`Starting graphql-rss-parser v${version}`);
+			console.log(
+				`Starting graphql-rss-parser v${version} with ${JSON.stringify({ ...args }, null, 2)}`,
+			);
 			const { url } = await startStandaloneServer(server, {
 				context: async ({ req }) => ({ token: req.headers.token }),
 				listen: { host: args.host, port: args.port },

src/errors.ts

@@ -187,9 +187,9 @@ export function createErrorFormatter(
 		console.error(
 			new Date().toISOString(),
 			"-",
-			originalError.message,
-			originalError.code ? "-" : "",
-			originalError.code ? originalError.code : "",
+			(originalError ?? error).message,
+			originalError?.code ? "-" : "",
+			originalError?.code ? originalError.code : "",
 		);
 
 		return response;

src/index.ts

@@ -6,6 +6,7 @@ import { schema } from "./schema.js";
 export type Options = {
 	version: string;
 	sentryDsn?: string;
+	csrfPrevention: boolean;
 };
 
 export default async function createServer(
@@ -33,6 +34,7 @@ export default async function createServer(
 		schema,
 		formatError,
 		persistedQueries: false,
+		csrfPrevention: options.csrfPrevention,
 	});
 
 	return apolloServer;