parse-server
parse-server copied to clipboard
Add graphql disableIntrospection or masterKeyOnlyIntrospection
trafficstars
New Feature / Enhancement Checklist
- [x] I am not disclosing a vulnerability.
- [x] I am not just asking a question.
- [x] I have searched through existing issues.
Current Limitation
No way to disable graphql introspection
Feature / Enhancement Description
Add a masterKeyOnlyGraphQLIntrospection option. That only allow the master key to perform a full schema introspection.
Example Use Case
masterKeyOnlyGraphQLIntrospection: true
Alternatives / Workarounds
None
3rd Party References
Thanks for opening this issue!
- 🎉 We are excited about your ideas for improvement!
Once GraphQL YOGA 2.0. pr is merged it will be easy with : https://www.envelop.dev/plugins/use-disable-introspection
Any news on this issue ?
I create a PR for this issue, but haven't got any answers. Will be away for a month but feel free to make changes to it.