Feature Request: Need API to limit query complexity / depth

[yookoala]

As title suggest. Library user would want to have a way to evaluate a graphql query complexity and refuse queries that are too complex.

[djmcgreal]

I believe https://www.npmjs.com/package/graphql-cost-analysis is the current JS library de jure. Potentially this doesn't go in the core go library?

[genert]

Bump.

[niondir]

For bigger projects complexity is quiet an important feature. What are the plans to implement it?

My feeling is that there is not much new development at all on this library.

[sevenzhao]

There is already an API to limit the query depth, but no API to limit the query complexity. The system should be protected from attack by complex querys. So there should be a API to limit query complexity.

[hongbo-miao]

FYI, if need, in JavaScript world, today graphql-query-complexity is better than graphql-cost-analysis now.

[danielgtaylor]

This looks like a port of graphql-cost-analysis into Go: https://github.com/koron-go/gqlcost