2024-03-20 11:02:08 -05:00
<!DOCTYPE HTML>
< html lang = "en" class = "light" dir = "ltr" >
< head >
<!-- Book generated using mdBook -->
< meta charset = "UTF-8" >
< title > Introspection - Juniper Book< / title >
<!-- Custom HTML head -->
< meta name = "description" content = "User guide for Juniper (GraphQL server library for Rust)." >
< meta name = "viewport" content = "width=device-width, initial-scale=1" >
< meta name = "theme-color" content = "#ffffff" >
< link rel = "icon" href = "../favicon.svg" >
< link rel = "shortcut icon" href = "../favicon.png" >
< link rel = "stylesheet" href = "../css/variables.css" >
< link rel = "stylesheet" href = "../css/general.css" >
< link rel = "stylesheet" href = "../css/chrome.css" >
< link rel = "stylesheet" href = "../css/print.css" media = "print" >
<!-- Fonts -->
< link rel = "stylesheet" href = "../FontAwesome/css/font-awesome.css" >
< link rel = "stylesheet" href = "../fonts/fonts.css" >
<!-- Highlight.js Stylesheets -->
< link rel = "stylesheet" href = "../highlight.css" >
< link rel = "stylesheet" href = "../tomorrow-night.css" >
< link rel = "stylesheet" href = "../ayu-highlight.css" >
<!-- Custom theme stylesheets -->
< / head >
< body class = "sidebar-visible no-js" >
< div id = "body-container" >
<!-- Provide site root to javascript -->
< script >
var path_to_root = "../";
var default_theme = window.matchMedia("(prefers-color-scheme: dark)").matches ? "navy" : "light";
< / script >
<!-- Work around some values being stored in localStorage wrapped in quotes -->
< script >
try {
var theme = localStorage.getItem('mdbook-theme');
var sidebar = localStorage.getItem('mdbook-sidebar');
if (theme.startsWith('"') & & theme.endsWith('"')) {
localStorage.setItem('mdbook-theme', theme.slice(1, theme.length - 1));
}
if (sidebar.startsWith('"') & & sidebar.endsWith('"')) {
localStorage.setItem('mdbook-sidebar', sidebar.slice(1, sidebar.length - 1));
}
} catch (e) { }
< / script >
<!-- Set the theme before any content is loaded, prevents flash -->
< script >
var theme;
try { theme = localStorage.getItem('mdbook-theme'); } catch(e) { }
if (theme === null || theme === undefined) { theme = default_theme; }
var html = document.querySelector('html');
html.classList.remove('light')
html.classList.add(theme);
var body = document.querySelector('body');
body.classList.remove('no-js')
body.classList.add('js');
< / script >
< input type = "checkbox" id = "sidebar-toggle-anchor" class = "hidden" >
<!-- Hide / unhide sidebar before it is displayed -->
< script >
var body = document.querySelector('body');
var sidebar = null;
var sidebar_toggle = document.getElementById("sidebar-toggle-anchor");
if (document.body.clientWidth >= 1080) {
try { sidebar = localStorage.getItem('mdbook-sidebar'); } catch(e) { }
sidebar = sidebar || 'visible';
} else {
sidebar = 'hidden';
}
sidebar_toggle.checked = sidebar === 'visible';
body.classList.remove('sidebar-visible');
body.classList.add("sidebar-" + sidebar);
< / script >
< nav id = "sidebar" class = "sidebar" aria-label = "Table of contents" >
< div class = "sidebar-scrollbox" >
< ol class = "chapter" > < li class = "chapter-item expanded " > < a href = "../introduction.html" > < strong aria-hidden = "true" > 1.< / strong > Introduction< / a > < / li > < li class = "chapter-item expanded " > < a href = "../quickstart.html" > < strong aria-hidden = "true" > 2.< / strong > Quickstart< / a > < / li > < li class = "chapter-item expanded " > < a href = "../types/index.html" > < strong aria-hidden = "true" > 3.< / strong > Type system< / a > < / li > < li > < ol class = "section" > < li class = "chapter-item expanded " > < a href = "../types/objects/index.html" > < strong aria-hidden = "true" > 3.1.< / strong > Objects< / a > < / li > < li > < ol class = "section" > < li class = "chapter-item expanded " > < a href = "../types/objects/complex_fields.html" > < strong aria-hidden = "true" > 3.1.1.< / strong > Complex fields< / a > < / li > < li class = "chapter-item expanded " > < a href = "../types/objects/context.html" > < strong aria-hidden = "true" > 3.1.2.< / strong > Context< / a > < / li > < li class = "chapter-item expanded " > < a href = "../types/objects/error/index.html" > < strong aria-hidden = "true" > 3.1.3.< / strong > Error handling< / a > < / li > < li > < ol class = "section" > < li class = "chapter-item expanded " > < a href = "../types/objects/error/field.html" > < strong aria-hidden = "true" > 3.1.3.1.< / strong > Field errors< / a > < / li > < li class = "chapter-item expanded " > < a href = "../types/objects/error/schema.html" > < strong aria-hidden = "true" > 3.1.3.2.< / strong > Schema errors< / a > < / li > < / ol > < / li > < li class = "chapter-item expanded " > < a href = "../types/objects/generics.html" > < strong aria-hidden = "true" > 3.1.4.< / strong > Generics< / a > < / li > < / ol > < / li > < li class = "chapter-item expanded " > < a href = "../types/interfaces.html" > < strong aria-hidden = "true" > 3.2.< / strong > Interfaces< / a > < / li > < li class = "chapter-item expanded " > < a href = "../types/unions.html" > < strong aria-hidden = "true" > 3.3.< / strong > Unions< / a > < / li > < li class = "chapter-item expanded " > < a href = "../types/enums.html" > < strong aria-hidden = "true" > 3.4.< / strong > Enums< / a > < / li > < li class = "chapter-item expanded " > < a href = "../types/input_objects.html" > < strong aria-hidden = "true" > 3.5.< / strong > Input objects< / a > < / li > < li class = "chapter-item expanded " > < a href = "../types/scalars.html" > < strong aria-hidden = "true" > 3.6.< / strong > Scalars< / a > < / li > < / ol > < / li > < li class = "chapter-item expanded " > < a href = "../schema/index.html" > < strong aria-hidden = "true" > 4.< / strong > Schema< / a > < / li > < li > < ol class = "section" > < li class = "chapter-item expanded " > < a href = "../schema/subscriptions.html" > < strong aria-hidden = "true" > 4.1.< / strong > Subscriptions< / a > < / li > < li class = "chapter-item expanded " > < a href = "../schema/introspection.html" class = "active" > < strong aria-hidden = "true" > 4.2.< / strong > Introspection< / a > < / li > < / ol > < / li > < li class = "chapter-item expanded " > < a href = "../serve/index.html" > < strong aria-hidden = "true" > 5.< / strong > Serving< / a > < / li > < li > < ol class = "section" > < li class = "chapter-item expanded " > < a href = "../serve/batching.html" > < strong aria-hidden = "true" > 5.1.< / strong > Batching< / a > < / li > < / ol > < / li > < li class = "chapter-item expanded " > < a href = "../advanced/index.html" > < strong aria-hidden = "true" > 6.< / strong > Advanced Topics< / a > < / li > < li > < ol class = "section" > < li class = "chapter-item expanded " > < a href = "../advanced/implicit_and_explicit_null.html" > < strong aria-hidden = "true" > 6.1.< / strong > Implicit and explicit null< / a > < / li > < li class = "chapter-item expanded " > < a href = "../advanced/n_plus_1.html" > < strong aria-hidden = "true" > 6.2.< / strong > N+1 problem< / a > < / li > < li > < ol class = "section" > < li class = "chapter-item expanded " > < a href = "../advanced/dataloader.html" > < strong aria-hidden = "true" > 6.2.1.< / strong > DataLoader< / a > < / li > < li class = "chapter-item expanded " > < a href = "../advanced/lookahead.html" > < strong aria-hidden = "true" > 6.2.2.< / strong > Look-ahead< / a > < / li > < li > < ol class = "section" > < li class = "chapter-item expanded " > < a href = "../advanced/eager_loading.html" > < strong aria-hidden = "true" > 6.2.2.1.< / strong > Eager loading< / a > < / li > < / ol > < / li > < / ol > < / li > < / ol > < / li > < / ol >
< / div >
< div id = "sidebar-resize-handle" class = "sidebar-resize-handle" >
< div class = "sidebar-resize-indicator" > < / div >
< / div >
< / nav >
<!-- Track and set sidebar scroll position -->
< script >
var sidebarScrollbox = document.querySelector('#sidebar .sidebar-scrollbox');
sidebarScrollbox.addEventListener('click', function(e) {
if (e.target.tagName === 'A') {
sessionStorage.setItem('sidebar-scroll', sidebarScrollbox.scrollTop);
}
}, { passive: true });
var sidebarScrollTop = sessionStorage.getItem('sidebar-scroll');
sessionStorage.removeItem('sidebar-scroll');
if (sidebarScrollTop) {
// preserve sidebar scroll position when navigating via links within sidebar
sidebarScrollbox.scrollTop = sidebarScrollTop;
} else {
// scroll sidebar to current active section when navigating via "next/previous chapter" buttons
var activeSection = document.querySelector('#sidebar .active');
if (activeSection) {
activeSection.scrollIntoView({ block: 'center' });
}
}
< / script >
< div id = "page-wrapper" class = "page-wrapper" >
< div class = "page" >
< div id = "menu-bar-hover-placeholder" > < / div >
< div id = "menu-bar" class = "menu-bar sticky" >
< div class = "left-buttons" >
< label id = "sidebar-toggle" class = "icon-button" for = "sidebar-toggle-anchor" title = "Toggle Table of Contents" aria-label = "Toggle Table of Contents" aria-controls = "sidebar" >
< i class = "fa fa-bars" > < / i >
< / label >
< button id = "theme-toggle" class = "icon-button" type = "button" title = "Change theme" aria-label = "Change theme" aria-haspopup = "true" aria-expanded = "false" aria-controls = "theme-list" >
< i class = "fa fa-paint-brush" > < / i >
< / button >
< ul id = "theme-list" class = "theme-popup" aria-label = "Themes" role = "menu" >
< li role = "none" > < button role = "menuitem" class = "theme" id = "light" > Light< / button > < / li >
< li role = "none" > < button role = "menuitem" class = "theme" id = "rust" > Rust< / button > < / li >
< li role = "none" > < button role = "menuitem" class = "theme" id = "coal" > Coal< / button > < / li >
< li role = "none" > < button role = "menuitem" class = "theme" id = "navy" > Navy< / button > < / li >
< li role = "none" > < button role = "menuitem" class = "theme" id = "ayu" > Ayu< / button > < / li >
< / ul >
< button id = "search-toggle" class = "icon-button" type = "button" title = "Search. (Shortkey: s)" aria-label = "Toggle Searchbar" aria-expanded = "false" aria-keyshortcuts = "S" aria-controls = "searchbar" >
< i class = "fa fa-search" > < / i >
< / button >
< / div >
< h1 class = "menu-title" > Juniper Book< / h1 >
< div class = "right-buttons" >
< a href = "../print.html" title = "Print this book" aria-label = "Print this book" >
< i id = "print-button" class = "fa fa-print" > < / i >
< / a >
< / div >
< / div >
< div id = "search-wrapper" class = "hidden" >
< form id = "searchbar-outer" class = "searchbar-outer" >
< input type = "search" id = "searchbar" name = "searchbar" placeholder = "Search this book ..." aria-controls = "searchresults-outer" aria-describedby = "searchresults-header" >
< / form >
< div id = "searchresults-outer" class = "searchresults-outer hidden" >
< div id = "searchresults-header" class = "searchresults-header" > < / div >
< ul id = "searchresults" >
< / ul >
< / div >
< / div >
<!-- Apply ARIA attributes after the sidebar and the sidebar toggle button are added to the DOM -->
< script >
document.getElementById('sidebar-toggle').setAttribute('aria-expanded', sidebar === 'visible');
document.getElementById('sidebar').setAttribute('aria-hidden', sidebar !== 'visible');
Array.from(document.querySelectorAll('#sidebar a')).forEach(function(link) {
link.setAttribute('tabIndex', sidebar === 'visible' ? 0 : -1);
});
< / script >
< div id = "content" class = "content" >
< main >
< h1 id = "introspection" > < a class = "header" href = "#introspection" > Introspection< / a > < / h1 >
< blockquote >
< p > The < a href = "https://spec.graphql.org/October2021#sec-Schema-Introspection" > schema introspection< / a > system is accessible from the meta-fields < code > __schema< / code > and < code > __type< / code > which are accessible from the type of the root of a query operation.< / p >
< pre > < code class = "language-graphql" > __schema: __Schema!
__type(name: String!): __Type
< / code > < / pre >
< p > Like all meta-fields, these are implicit and do not appear in the fields list in the root type of the query operation.< / p >
< / blockquote >
< p > < a href = "https://graphql.org" > GraphQL< / a > provides < a href = "https://spec.graphql.org/October2021#sec-Introspection" > introspection< / a > , allowing to see what < a href = "https://spec.graphql.org/October2021#sel-GAFRJBABABF_jB" > queries< / a > , < a href = "https://spec.graphql.org/October2021#sel-GAFRJDABABI5C" > mutations< / a > and < a href = "https://spec.graphql.org/October2021#sel-GAFRJFABABMvpN" > subscriptions< / a > a < a href = "https://graphql.org" > GraphQL< / a > server supports at runtime.< / p >
< p > Because < a href = "https://spec.graphql.org/October2021#sec-Introspection" > introspection< / a > queries are just regular < a href = "https://spec.graphql.org/October2021#sel-GAFRJBABABF_jB" > GraphQL queries< / a > , < a href = "https://docs.rs/juniper" > Juniper< / a > supports them natively. For example, to get all the names of the types supported, we could < a href = "https://spec.graphql.org/October2021#sec-Execution" > execute< / a > the following < a href = "https://spec.graphql.org/October2021#sel-GAFRJBABABF_jB" > query< / a > against < a href = "https://docs.rs/juniper" > Juniper< / a > :< / p >
< pre > < code class = "language-graphql" > {
__schema {
types {
name
}
}
}
< / code > < / pre >
< h2 id = "disabling" > < a class = "header" href = "#disabling" > Disabling< / a > < / h2 >
< blockquote >
< p > Disabling introspection in production is a widely debated topic, but we believe it’ < / p >
< / blockquote >
2024-04-04 08:59:20 -05:00
< p > < a href = "https://www.apollographql.com/blog/why-you-should-disable-graphql-introspection-in-production" > Some security requirements and considerations< / a > may mandate to disable < a href = "https://spec.graphql.org/October2021#sec-Schema-Introspection" > GraphQL schema introspection< / a > in production environments. In < a href = "https://docs.rs/juniper" > Juniper< / a > this can be achieved by using the < a href = "https://docs.rs/juniper/0.16.1/juniper/struct.RootNode.html#method.disable_introspection" > < code > RootNode::disable_introspection()< / code > < / a > method:< / p >
2024-03-20 11:02:08 -05:00
< pre > < pre class = "playground" > < code class = "language-rust edition2021" > < span class = "boring" > extern crate juniper;
< / span > < span class = "boring" > use juniper::{
< / span > < span class = "boring" > graphql_object, graphql_vars, EmptyMutation, EmptySubscription, GraphQLError,
< / span > < span class = "boring" > RootNode,
< / span > < span class = "boring" > };
< / span > < span class = "boring" >
< / span > pub struct Query;
#[graphql_object]
impl Query {
fn some() -> bool {
true
}
}
type Schema = RootNode< 'static, Query, EmptyMutation, EmptySubscription> ;
fn main() {
let schema = Schema::new(Query, EmptyMutation::new(), EmptySubscription::new())
.disable_introspection();
let query = "query { __schema { queryType { name } } }";
match juniper::execute_sync(query, None, & schema, & graphql_vars! {}, & ()) {
Err(GraphQLError::ValidationError(errs)) => {
assert_eq!(
errs.first().unwrap().message(),
"GraphQL introspection is not allowed, but the operation contained `__schema`",
);
}
res => panic!("expected `ValidationError`, returned: {res:#?}"),
}
}< / code > < / pre > < / pre >
< blockquote >
< p > < strong > NOTE< / strong > : Attempt to execute an < a href = "https://spec.graphql.org/October2021#sec-Schema-Introspection" > introspection query< / a > results in < a href = "https://spec.graphql.org/October2021#sec-Validation" > validation< / a > error, rather than < a href = "https://spec.graphql.org/October2021#sec-Execution" > execution< / a > error.< / p >
< / blockquote >
< / main >
< nav class = "nav-wrapper" aria-label = "Page navigation" >
<!-- Mobile navigation buttons -->
< a rel = "prev" href = "../schema/subscriptions.html" class = "mobile-nav-chapters previous" title = "Previous chapter" aria-label = "Previous chapter" aria-keyshortcuts = "Left" >
< i class = "fa fa-angle-left" > < / i >
< / a >
< a rel = "next prefetch" href = "../serve/index.html" class = "mobile-nav-chapters next" title = "Next chapter" aria-label = "Next chapter" aria-keyshortcuts = "Right" >
< i class = "fa fa-angle-right" > < / i >
< / a >
< div style = "clear: both" > < / div >
< / nav >
< / div >
< / div >
< nav class = "nav-wide-wrapper" aria-label = "Page navigation" >
< a rel = "prev" href = "../schema/subscriptions.html" class = "nav-chapters previous" title = "Previous chapter" aria-label = "Previous chapter" aria-keyshortcuts = "Left" >
< i class = "fa fa-angle-left" > < / i >
< / a >
< a rel = "next prefetch" href = "../serve/index.html" class = "nav-chapters next" title = "Next chapter" aria-label = "Next chapter" aria-keyshortcuts = "Right" >
< i class = "fa fa-angle-right" > < / i >
< / a >
< / nav >
< / div >
< script >
window.playground_copyable = true;
< / script >
< script src = "../elasticlunr.min.js" > < / script >
< script src = "../mark.min.js" > < / script >
< script src = "../searcher.js" > < / script >
< script src = "../clipboard.min.js" > < / script >
< script src = "../highlight.js" > < / script >
< script src = "../book.js" > < / script >
<!-- Custom JS scripts -->
< / div >
< / body >
< / html >
