spring-boot/spring-boot-project
Brian Clozel c5817f21eb Add property for disabling GraphQL schema introspection
Prior to this commit, the GraphQL schema assembled by the
auto-configuration would provide no option for disabling the field
introspection.

While this feature is essential for many tools (including GraphiQL),
some prefer disabling it because this allows clients to gather
information about types and schema easily. This commit introduces a new
`spring.graphql.schema.introspection.enabled` configuration property.

Because potential attackers can still gather this information and this
feature is a core concern in the GraphQL spec, introspection is enabled
by default for Spring Boot applications.

Closes gh-29248
2022-01-03 17:36:58 +01:00
..
spring-boot Merge branch '2.6.x' into 2.7.x 2021-12-20 14:00:24 -06:00
spring-boot-actuator Polish GraphQL changes 2022-01-03 17:36:57 +01:00
spring-boot-actuator-autoconfigure Merge branch '2.6.x' into 2.7.x 2021-12-30 07:33:26 +01:00
spring-boot-autoconfigure Add property for disabling GraphQL schema introspection 2022-01-03 17:36:58 +01:00
spring-boot-cli Update copyright year of changed files 2021-11-24 10:23:32 -08:00
spring-boot-dependencies Upgrade to XmlUnit2 2.8.4 2022-01-03 11:05:57 +01:00
spring-boot-devtools Polish "Log the reason that led Devtools to restart the app" 2022-01-03 14:48:39 +01:00
spring-boot-docs Add property for disabling GraphQL schema introspection 2022-01-03 17:36:58 +01:00
spring-boot-parent Merge branch '2.5.x' 2021-11-12 23:40:35 +00:00
spring-boot-properties-migrator Merge branch '2.3.x' into 2.4.x 2021-02-02 15:12:27 +00:00
spring-boot-starters Add GraphQL Spring Boot starter 2021-12-21 08:34:40 +01:00
spring-boot-test Fix WebGraphQlTester auto-registration for SpringBootTest 2022-01-03 17:36:57 +01:00
spring-boot-test-autoconfigure Upgrade to Selenium 4.1.1 2022-01-03 11:04:53 +01:00
spring-boot-tools Merge branch '2.6.x' into 2.7.x 2021-12-25 09:55:38 +01:00