graphql-js

graphql-js copied to clipboard

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7. Release notes Sourced from node-fetch's releases. v2.6.7 Security patch release Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th...

dependabot[bot]

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

Hi, Following this tutorial (https://www.howtographql.com/graphql-js/1-getting-started/) will lead to the following error when trying to run the server: > Error: Must provide document. As a beginner I did not really understood...

KalessWave

Bumps [apollo-server](https://github.com/apollographql/apollo-server/tree/HEAD/packages/apollo-server) from 2.19.0 to 2.25.3. Changelog Sourced from apollo-server's changelog. v2.25.3 ⚠️ SECURITY apollo-server-core: Update default version of the GraphQL Playground React app loaded from the CDN to be...

dependabot[bot]

Bumps [object-path](https://github.com/mariocasciaro/object-path) from 0.11.5 to 0.11.8. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

TypeError: PubSub is not a constructor

2

Hi, I am getting this error `TypeError: PubSub is not a constructor` when importing PubSub from apollo-server code snippet: const { PubSub} = require('apollo-server'); const pubsub = new PubSub(); I...

luane-aquino

Usage of authToken parameter in getUserId(req,authToken) funciton defined in utils??

1

HI there. I just finished the chapter 6 and 7 and I still do not understand the use of the second parameter in that function. Can someone tell if what...

ak127a

Authorization check flaw: 'post' mutation does get invoked when no headers provided

1

On step [6-authentication](https://github.com/howtographql/howtographql/blob/master/content/backend/graphql-js/6-authentication.md#requiring-authentication-for-the-post-mutation) there is an explanation that there will be an _error indicating that the user was not authenticated_:  This is only true if there is an authorization...

steelcracker

Bumps [glob-parent](https://github.com/gulpjs/glob-parent) from 5.1.1 to 5.1.2. Release notes Sourced from glob-parent's releases. v5.1.2 Bug Fixes eliminate ReDoS (#36) (f923116) Changelog Sourced from glob-parent's changelog. 5.1.2 (2021-03-06) Bug Fixes eliminate ReDoS...

dependabot[bot]

Bumps [normalize-url](https://github.com/sindresorhus/normalize-url) from 4.5.0 to 4.5.1. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]