dotCMS / core

Headless/Hybrid Content Management System for Enterprises
http://dotcms.com
Other
819 stars 461 forks source link

GQL: GraphQL Playground Not Loading Schemas #29109

Closed fmontes closed 12 hours ago

fmontes commented 2 weeks ago

Problem Statement

The GraphQL playground is not loading the schemas because it needs authentication now.

Steps to Reproduce

https://github.com/dotCMS/core/assets/751424/15f5e479-f55c-44a2-aba2-cf99290a127b

Acceptance Criteria

External Links

Assumptions & Initiation Needs

Quality Assurance Notes & Workarounds

imolorhe commented 1 week ago

FYI Altair allows for lots of customizations if you'd also like to make it look branded

fabrizzio-dotCMS commented 1 week ago

@fmontes is the schema expected to load at all times even when no authorization has been granted?

fmontes commented 1 week ago

@fabrizzio-dotCMS no, it used to be that way and it got changed because security concerns.

https://www.apollographql.com/docs/technotes/TN0021-graph-security/#turn-off-introspection-in-production

So now the problem is that our playground stop working and some other clients are not working either.

I am not sure how the GQL endpoint should be authorized, @dsilvam told me cookie, but I also tried bearer token and it work in some GQL clients.