graphiql explorer UI unstable

[rishi-rana]

Looks like it uses unkg.com to host the javascript and css, which seem to be very unstable, its spitting cors errors randomly when accessing http://localhost:8080/graphiql?path=/graphql

[kyriakos-katsigarakis]

,

I have the same issue. Also, when it works it loads js css files very slowly. Why the property spring.graphql.graphiql.cdn.enabled has been removed?

[fotoetienne]

Seeing the same issue. The graphiql assets should probably be vendored so that it isn't reliant on unpkg reliability

[bclozel]

I think there is an outage with this service right now, see unpkg/unpkg#412

@kyriakos-katsigarakis I don't think we ever supported this property. Care to elaborate?

We could consider packaging this dependency with our JAR but with two important caveats:

1. The UI would stick to a fixed version instead of pointing to the latest one
2. Shipping third party software exposes spring-graphql to CVEs

Given that the graphiql option is meant for local development only and that we advise to build your own for other use cases, I'm not sure the tradeoff is in favor here.

[bclozel]

Closing as we don't intend to change this right now.