search

parse-community / parse-server

Parse Server for Node.js / Express
https://parseplatform.org
Apache License 2.0
20.84k stars 4.77k forks source link

Add graphql disableIntrospection or masterKeyOnlyIntrospection #7972

Open Moumouls opened 2 years ago

Moumouls commented 2 years ago

New Feature / Enhancement Checklist

Current Limitation

No way to disable graphql introspection

Feature / Enhancement Description

Add a masterKeyOnlyGraphQLIntrospection option. That only allow the master key to perform a full schema introspection.

Example Use Case

masterKeyOnlyGraphQLIntrospection: true

Alternatives / Workarounds

None

3rd Party References

parse-github-assistant[bot] commented 2 years ago

Thanks for opening this issue!

Moumouls commented 2 years ago

Once GraphQL YOGA 2.0. pr is merged it will be easy with : https://www.envelop.dev/plugins/use-disable-introspection

axelhildingson commented 1 year ago

Any news on this issue ?

axelhildingson commented 1 year ago

I create a PR for this issue, but haven't got any answers. Will be away for a month but feel free to make changes to it.