How to disable introspection

[iamchathu]

In Apollo server there is an option introspection: true to turn on and off graphql introspection. How to the same in GraphQL yoga?

[performautodev]

You can done this by :

const NoIntrospection = require("graphql-disable-introspection");

server.start(
{
validationRules: [NoIntrospection],
} );

export declare class GraphQLServer {
...
options: Options;
..
}

export interface Options extends ApolloServerOptions {
port?: number | string;
cors?: CorsOptions | false;
...
}

[iamchathu]

@performautodev Typescript complains about the introspection field. Will check with it.

[omar-dulaimi]

There's no such "introspection" option in Yoga, I'm still looking around for ways to disable it. It seems that this project is no longer active. What about the many production projects out there depending on it? Open source should not be like this.

[omar-dulaimi]

I found a library that fix this issue: https://www.npmjs.com/package/graphql-disable-introspection

[saihaj]

hey @iamchathu @omar-dulaimi we @the-guild-org are the new maintainers of this project. We are actively developing v2. It is build on top of envelop and in the new version you can just pass in the disable introspection plugin.

import { createServer } from '@graphql-yoga/node'
import { useDisableIntrospection } from '@envelop/disable-introspection'
const server = createServer({
  schema,
  logging: false,
  plugins: [useDisableIntrospection()]
})

Would love to get your feedback on beta release!