graphql-java-tools
graphql-java-tools copied to clipboard
Disabling introspection by introspectionEnabled
Description
Disabling introspection by setting introspectionEnabled to false does not work
Expected behavior
Field types that starts with __ is blocked and not exposed.
Actual behavior
Field types such as __typename is included in the response
Steps to reproduce the bug
- Create GraphQLSchema bean where you return something like this:
return SchemaParser .newParser() .file(GRAPHQL_SCHEMA) .resolvers( new RootResolver(someStorage), new SomeOtherResolver(anotherService) ) .dictionary(SomeGraphQlType.getName(), SomeGraphQlType.class) .scalars(JsonObjectScalar.JSON) .options(SchemaParserOptions.newOptions().introspectionEnabled(false).build()) .build() .makeExecutableSchema(); - Make a graphql query that returns a type
- Confirm that the __typename information exists