RubyGems - graphql-stitching - Versions diffs - 1.4.3 → 1.5.0 - Mend

graphql-stitching 1.4.3 → 1.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (70) hide show

checksums.yaml +4 -4
data/.gitignore +4 -0
data/README.md +4 -2
data/docs/README.md +1 -0
data/docs/composer.md +1 -1
data/docs/subscriptions.md +208 -0
data/examples/subscriptions/.gitattributes +9 -0
data/examples/subscriptions/.gitignore +35 -0
data/examples/subscriptions/Gemfile +65 -0
data/examples/subscriptions/README.md +38 -0
data/examples/subscriptions/Rakefile +6 -0
data/examples/subscriptions/app/channels/graphql_channel.rb +50 -0
data/examples/subscriptions/app/controllers/graphql_controller.rb +44 -0
data/examples/subscriptions/app/graphql/entities_schema.rb +42 -0
data/examples/subscriptions/app/graphql/stitched_schema.rb +10 -0
data/examples/subscriptions/app/graphql/subscriptions_schema.rb +54 -0
data/examples/subscriptions/app/models/repository.rb +39 -0
data/examples/subscriptions/app/views/graphql/client.html.erb +159 -0
data/examples/subscriptions/bin/bundle +109 -0
data/examples/subscriptions/bin/docker-entrypoint +8 -0
data/examples/subscriptions/bin/importmap +4 -0
data/examples/subscriptions/bin/rails +4 -0
data/examples/subscriptions/bin/rake +4 -0
data/examples/subscriptions/bin/setup +33 -0
data/examples/subscriptions/config/application.rb +14 -0
data/examples/subscriptions/config/boot.rb +4 -0
data/examples/subscriptions/config/cable.yml +10 -0
data/examples/subscriptions/config/credentials.yml.enc +1 -0
data/examples/subscriptions/config/database.yml +25 -0
data/examples/subscriptions/config/environment.rb +5 -0
data/examples/subscriptions/config/environments/development.rb +74 -0
data/examples/subscriptions/config/environments/production.rb +91 -0
data/examples/subscriptions/config/environments/test.rb +64 -0
data/examples/subscriptions/config/initializers/content_security_policy.rb +25 -0
data/examples/subscriptions/config/initializers/filter_parameter_logging.rb +8 -0
data/examples/subscriptions/config/initializers/inflections.rb +16 -0
data/examples/subscriptions/config/initializers/permissions_policy.rb +13 -0
data/examples/subscriptions/config/locales/en.yml +31 -0
data/examples/subscriptions/config/master.key +1 -0
data/examples/subscriptions/config/puma.rb +35 -0
data/examples/subscriptions/config/routes.rb +8 -0
data/examples/subscriptions/config/storage.yml +34 -0
data/examples/subscriptions/config.ru +6 -0
data/examples/subscriptions/db/seeds.rb +9 -0
data/examples/subscriptions/public/404.html +17 -0
data/examples/subscriptions/public/422.html +17 -0
data/examples/subscriptions/public/500.html +16 -0
data/examples/subscriptions/public/apple-touch-icon-precomposed.png +0 -0
data/examples/subscriptions/public/apple-touch-icon.png +0 -0
data/examples/subscriptions/public/favicon.ico +0 -0
data/examples/subscriptions/public/robots.txt +1 -0
data/lib/graphql/stitching/client.rb +18 -11
data/lib/graphql/stitching/composer/resolver_config.rb +1 -1
data/lib/graphql/stitching/composer/validate_resolvers.rb +7 -1
data/lib/graphql/stitching/composer.rb +30 -27
data/lib/graphql/stitching/executor/shaper.rb +1 -1
data/lib/graphql/stitching/executor.rb +19 -11
data/lib/graphql/stitching/http_executable.rb +3 -0
data/lib/graphql/stitching/plan.rb +1 -1
data/lib/graphql/stitching/planner.rb +21 -5
data/lib/graphql/stitching/{skip_include.rb → request/skip_include.rb} +2 -2
data/lib/graphql/stitching/request.rb +42 -4
data/lib/graphql/stitching/resolver/arguments.rb +2 -2
data/lib/graphql/stitching/resolver/keys.rb +2 -3
data/lib/graphql/stitching/resolver.rb +3 -3
data/lib/graphql/stitching/supergraph.rb +5 -2
data/lib/graphql/stitching/util.rb +1 -0
data/lib/graphql/stitching/version.rb +1 -1
data/lib/graphql/stitching.rb +17 -1
metadata +49 -3

data/examples/subscriptions/app/views/graphql/client.html.erb ADDED Viewed

@@ -0,0 +1,159 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <title>GraphiQL</title>
+    <style>
+      body {
+        height: 100%;
+        margin: 0;
+        width: 100%;
+        overflow: hidden;
+      }
+      #graphiql {
+        height: 100vh;
+      }
+    </style>
+    <!--
+      This GraphiQL example depends on Promise and fetch, which are available in
+      modern browsers, but can be "polyfilled" for older browsers.
+      GraphiQL itself depends on React DOM.
+      If you do not want to rely on a CDN, you can host these files locally or
+      include them directly in your favored resource bundler.
+    -->
+    <script
+      crossorigin
+      src="https://unpkg.com/react@18/umd/react.development.js"
+    ></script>
+    <script
+      crossorigin
+      src="https://unpkg.com/react-dom@18/umd/react-dom.development.js"
+    ></script>
+    <!--
+      These two files can be found in the npm module, however you may wish to
+      copy them directly into your environment, or perhaps include them in your
+      favored resource bundler.
+     -->
+    <script
+      src="https://unpkg.com/graphiql/graphiql.min.js"
+      type="application/javascript"
+    ></script>
+    <link rel="stylesheet" href="https://unpkg.com/graphiql/graphiql.min.css" />
+    <!--
+      These are imports for the GraphIQL Explorer plugin.
+     -->
+    <script
+      src="https://unpkg.com/@graphiql/plugin-explorer/dist/index.umd.js"
+      crossorigin
+    ></script>
+    <script
+      src="https://cdn.jsdelivr.net/npm/actioncable@5.2.8-1/lib/assets/compiled/action_cable.min.js"
+      crossorigin
+    ></script>
+    <link
+      rel="stylesheet"
+      href="https://unpkg.com/@graphiql/plugin-explorer/dist/style.css"
+    />
+  </head>
+  <body>
+    <div id="graphiql">Loading...</div>
+    <script>
+      const actionCable = ActionCable.createConsumer();
+      console.log(actionCable);
+      function createActionCableFetcher(options) {
+        let currentChannel = null
+        const consumer = options.consumer
+        const url = options.url || "/graphql"
+        const channelName = options.channelName || "GraphqlChannel"
+        const subscriptionFetcher = async function*(graphqlParams, fetcherOpts) {
+          let isSubscription = false;
+          let nextPromiseResolve = null;
+          if (fetcherOpts.documentAST) {
+            let ops = fetcherOpts.documentAST.definitions.filter(op => op.kind == "OperationDefinition");
+            let op = ops.length < 2 ? ops[0] : ops.find(op => graphqlParams.operationName === op.name.value);
+            isSubscription = op && op.operation === 'subscription';
+          }
+          if (isSubscription) {
+            if (currentChannel) { currentChannel.unsubscribe() }
+            currentChannel = consumer.subscriptions.create(channelName,
+              {
+                connected: function() {
+                  if (currentChannel) {
+                    currentChannel.perform("execute", {
+                      query: graphqlParams.query,
+                      operationName: graphqlParams.operationName,
+                      variables: graphqlParams.variables,
+                    })
+                  }
+                },
+                received: function(data) {
+                  if (nextPromiseResolve) {
+                    nextPromiseResolve({ value: data.result, done: false })
+                  }
+                }
+              }
+            )
+            var iterator = {
+              [Symbol.asyncIterator]() {
+                return {
+                  next() {
+                    return new Promise((resolve, _reject) => {
+                      nextPromiseResolve = resolve
+                    })
+                  },
+                  return() {
+                    if (currentChannel) {
+                      currentChannel.unsubscribe()
+                      currentChannel = null
+                    }
+                    return Promise.resolve({ value: null, done: true })
+                  }
+                }
+              }
+            }
+            for await (const payload of iterator) {
+              yield payload
+            }
+          } else {
+            const fetchFn = options.fetch || window.fetch
+            yield fetchFn(url, {
+              method: "POST",
+              body: JSON.stringify({
+                query: graphqlParams.query,
+                operationName: graphqlParams.operationName,
+                variables: graphqlParams.variables,
+              }),
+              headers: {
+                'content-type': 'application/json',
+              },
+              ... options.fetchOptions
+            }).then((r) => r.json())
+            return
+          }
+        }
+        return subscriptionFetcher
+      }
+      const railsFetcher = createActionCableFetcher({ consumer: actionCable, url: "/graphql" })
+      ReactDOM.createRoot(document.getElementById('graphiql')).render(
+        React.createElement(GraphiQL, {
+          fetcher: railsFetcher,
+          defaultEditorToolsVisibility: true,
+          plugins: [GraphiQLPluginExplorer.explorerPlugin()],
+        }),
+      );
+    </script>
+  </body>
+</html>

data/examples/subscriptions/bin/bundle ADDED Viewed

@@ -0,0 +1,109 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+#
+# This file was generated by Bundler.
+#
+# The application 'bundle' is installed as part of a gem, and
+# this file is here to facilitate running it.
+#
+require "rubygems"
+m = Module.new do
+  module_function
+  def invoked_as_script?
+    File.expand_path($0) == File.expand_path(__FILE__)
+  end
+  def env_var_version
+    ENV["BUNDLER_VERSION"]
+  end
+  def cli_arg_version
+    return unless invoked_as_script? # don't want to hijack other binstubs
+    return unless "update".start_with?(ARGV.first || " ") # must be running `bundle update`
+    bundler_version = nil
+    update_index = nil
+    ARGV.each_with_index do |a, i|
+      if update_index && update_index.succ == i && a =~ Gem::Version::ANCHORED_VERSION_PATTERN
+        bundler_version = a
+      end
+      next unless a =~ /\A--bundler(?:[= ](#{Gem::Version::VERSION_PATTERN}))?\z/
+      bundler_version = $1
+      update_index = i
+    end
+    bundler_version
+  end
+  def gemfile
+    gemfile = ENV["BUNDLE_GEMFILE"]
+    return gemfile if gemfile && !gemfile.empty?
+    File.expand_path("../Gemfile", __dir__)
+  end
+  def lockfile
+    lockfile =
+      case File.basename(gemfile)
+      when "gems.rb" then gemfile.sub(/\.rb$/, ".locked")
+      else "#{gemfile}.lock"
+      end
+    File.expand_path(lockfile)
+  end
+  def lockfile_version
+    return unless File.file?(lockfile)
+    lockfile_contents = File.read(lockfile)
+    return unless lockfile_contents =~ /\n\nBUNDLED WITH\n\s{2,}(#{Gem::Version::VERSION_PATTERN})\n/
+    Regexp.last_match(1)
+  end
+  def bundler_requirement
+    @bundler_requirement ||=
+      env_var_version ||
+      cli_arg_version ||
+      bundler_requirement_for(lockfile_version)
+  end
+  def bundler_requirement_for(version)
+    return "#{Gem::Requirement.default}.a" unless version
+    bundler_gem_version = Gem::Version.new(version)
+    bundler_gem_version.approximate_recommendation
+  end
+  def load_bundler!
+    ENV["BUNDLE_GEMFILE"] ||= gemfile
+    activate_bundler
+  end
+  def activate_bundler
+    gem_error = activation_error_handling do
+      gem "bundler", bundler_requirement
+    end
+    return if gem_error.nil?
+    require_error = activation_error_handling do
+      require "bundler/version"
+    end
+    return if require_error.nil? && Gem::Requirement.new(bundler_requirement).satisfied_by?(Gem::Version.new(Bundler::VERSION))
+    warn "Activating bundler (#{bundler_requirement}) failed:\n#{gem_error.message}\n\nTo install the version of bundler this project requires, run `gem install bundler -v '#{bundler_requirement}'`"
+    exit 42
+  end
+  def activation_error_handling
+    yield
+    nil
+  rescue StandardError, LoadError => e
+    e
+  end
+end
+m.load_bundler!
+if m.invoked_as_script?
+  load Gem.bin_path("bundler", "bundle")
+end

data/examples/subscriptions/bin/docker-entrypoint ADDED Viewed

@@ -0,0 +1,8 @@
+#!/bin/bash -e
+# If running the rails server then create or migrate existing database
+if [ "${1}" == "./bin/rails" ] && [ "${2}" == "server" ]; then
+  ./bin/rails db:prepare
+fi
+exec "${@}"

data/examples/subscriptions/bin/importmap ADDED Viewed

@@ -0,0 +1,4 @@
+#!/usr/bin/env ruby
+require_relative "../config/application"
+require "importmap/commands"

data/examples/subscriptions/bin/rails ADDED Viewed

@@ -0,0 +1,4 @@
+#!/usr/bin/env ruby
+APP_PATH = File.expand_path("../config/application", __dir__)
+require_relative "../config/boot"
+require "rails/commands"

data/examples/subscriptions/bin/rake ADDED Viewed

@@ -0,0 +1,4 @@
+#!/usr/bin/env ruby
+require_relative "../config/boot"
+require "rake"
+Rake.application.run

data/examples/subscriptions/bin/setup ADDED Viewed

@@ -0,0 +1,33 @@
+#!/usr/bin/env ruby
+require "fileutils"
+# path to your application root.
+APP_ROOT = File.expand_path("..", __dir__)
+def system!(*args)
+  system(*args, exception: true)
+end
+FileUtils.chdir APP_ROOT do
+  # This script is a way to set up or update your development environment automatically.
+  # This script is idempotent, so that you can run it at any time and get an expectable outcome.
+  # Add necessary setup steps to this file.
+  puts "== Installing dependencies =="
+  system! "gem install bundler --conservative"
+  system("bundle check") || system!("bundle install")
+  # puts "\n== Copying sample files =="
+  # unless File.exist?("config/database.yml")
+  #   FileUtils.cp "config/database.yml.sample", "config/database.yml"
+  # end
+  puts "\n== Preparing database =="
+  system! "bin/rails db:prepare"
+  puts "\n== Removing old logs and tempfiles =="
+  system! "bin/rails log:clear tmp:clear"
+  puts "\n== Restarting application server =="
+  system! "bin/rails restart"
+end

data/examples/subscriptions/config/application.rb ADDED Viewed

@@ -0,0 +1,14 @@
+require_relative "boot"
+require "rails/all"
+# Require the gems listed in Gemfile, including any gems
+# you've limited to :test, :development, or :production.
+Bundler.require(*Rails.groups)
+module Subscriptions
+  class Application < Rails::Application
+    # Initialize configuration defaults for originally generated Rails version.
+    config.load_defaults 7.1
+  end
+end

data/examples/subscriptions/config/boot.rb ADDED Viewed

@@ -0,0 +1,4 @@
+ENV["BUNDLE_GEMFILE"] ||= File.expand_path("../Gemfile", __dir__)
+require "bundler/setup" # Set up gems listed in the Gemfile.
+require "bootsnap/setup" # Speed up boot time by caching expensive operations.

data/examples/subscriptions/config/cable.yml ADDED Viewed

@@ -0,0 +1,10 @@
+development:
+  adapter: async
+test:
+  adapter: test
+production:
+  adapter: redis
+  url: <%= ENV.fetch("REDIS_URL") { "redis://localhost:6379/1" } %>
+  channel_prefix: subscriptions_production

data/examples/subscriptions/config/credentials.yml.enc ADDED Viewed

@@ -0,0 +1 @@

+ kc7oqupA92PHWoLMp0Rd/b52T1bVMbrGyLfTivb0hv6JbXoYtLQz60ybA3O4moEiU/zJa1kcz/9T2MZ0iOp/ah8vu864iljomLt8saNZrUfcTSDQvxyAYpbbWyyV0F0twf9TIbmWrSZep2usSMY5O5Tck4AAlv7Kld2+Fe7aAFtMLZCFclgOYvg+c3JyO0fW2UqYVRffWI6brTW+BCY6DShx7O4rYXLRUg831f5T3Ujz/c2tUUHI6V9Q/WvUbI4TZ3JwYh+cMF0ARNcWVcbHBcK4WYcKAlz8FdKPWp/CDhDJJt5dBbhCf/b1Hh/74qeLDR8zYCq6sPkdCvcYmL8ELjCoaNYh7RhV8e0SrJKpe8FyGck0Zgl0noteTu3yCAw42731BL88wagjcIe/B3SRLSLyvtya--xBs9lXK9DaXe8cVf--gj2alHD2yabXnsT+PJ9KMg==

data/examples/subscriptions/config/database.yml ADDED Viewed

@@ -0,0 +1,25 @@
+# SQLite. Versions 3.8.0 and up are supported.
+#   gem install sqlite3
+#
+#   Ensure the SQLite 3 gem is defined in your Gemfile
+#   gem "sqlite3"
+#
+default: &default
+  adapter: sqlite3
+  pool: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %>
+  timeout: 5000
+development:
+  <<: *default
+  database: storage/development.sqlite3
+# Warning: The database defined as "test" will be erased and
+# re-generated from your development database when you run "rake".
+# Do not set this db to the same as development or production.
+test:
+  <<: *default
+  database: storage/test.sqlite3
+production:
+  <<: *default
+  database: storage/production.sqlite3

data/examples/subscriptions/config/environment.rb ADDED Viewed

@@ -0,0 +1,5 @@
+# Load the Rails application.
+require_relative "application"
+# Initialize the Rails application.
+Rails.application.initialize!

data/examples/subscriptions/config/environments/development.rb ADDED Viewed

@@ -0,0 +1,74 @@
+require "active_support/core_ext/integer/time"
+Rails.application.configure do
+  # Settings specified here will take precedence over those in config/application.rb.
+  # In the development environment your application's code is reloaded any time
+  # it changes. This slows down response time but is perfect for development
+  # since you don't have to restart the web server when you make code changes.
+  config.enable_reloading = true
+  # Do not eager load code on boot.
+  config.eager_load = false
+  # Show full error reports.
+  config.consider_all_requests_local = true
+  # Enable server timing
+  config.server_timing = true
+  # Enable/disable caching. By default caching is disabled.
+  # Run rails dev:cache to toggle caching.
+  if Rails.root.join("tmp/caching-dev.txt").exist?
+    config.action_controller.perform_caching = true
+    config.action_controller.enable_fragment_cache_logging = true
+    config.cache_store = :memory_store
+    config.public_file_server.headers = {
+      "Cache-Control" => "public, max-age=#{2.days.to_i}"
+    }
+  else
+    config.action_controller.perform_caching = false
+    config.cache_store = :null_store
+  end
+  # Store uploaded files on the local file system (see config/storage.yml for options).
+  config.active_storage.service = :local
+  # Don't care if the mailer can't send.
+  config.action_mailer.raise_delivery_errors = false
+  config.action_mailer.perform_caching = false
+  # Print deprecation notices to the Rails logger.
+  config.active_support.deprecation = :log
+  # Raise exceptions for disallowed deprecations.
+  config.active_support.disallowed_deprecation = :raise
+  # Tell Active Support which deprecation messages to disallow.
+  config.active_support.disallowed_deprecation_warnings = []
+  # Raise an error on page load if there are pending migrations.
+  config.active_record.migration_error = :page_load
+  # Highlight code that triggered database queries in logs.
+  config.active_record.verbose_query_logs = true
+  # Highlight code that enqueued background job in logs.
+  config.active_job.verbose_enqueue_logs = true
+  # Raises error for missing translations.
+  # config.i18n.raise_on_missing_translations = true
+  # Annotate rendered view with file names.
+  # config.action_view.annotate_rendered_view_with_filenames = true
+  # Uncomment if you wish to allow Action Cable access from any origin.
+  # config.action_cable.disable_request_forgery_protection = true
+  # Raise error when a before_action's only/except options reference missing actions
+  config.action_controller.raise_on_missing_callback_actions = true
+end

data/examples/subscriptions/config/environments/production.rb ADDED Viewed

@@ -0,0 +1,91 @@
+require "active_support/core_ext/integer/time"
+Rails.application.configure do
+  # Settings specified here will take precedence over those in config/application.rb.
+  # Code is not reloaded between requests.
+  config.enable_reloading = false
+  # Eager load code on boot. This eager loads most of Rails and
+  # your application in memory, allowing both threaded web servers
+  # and those relying on copy on write to perform better.
+  # Rake tasks automatically ignore this option for performance.
+  config.eager_load = true
+  # Full error reports are disabled and caching is turned on.
+  config.consider_all_requests_local = false
+  config.action_controller.perform_caching = true
+  # Ensures that a master key has been made available in ENV["RAILS_MASTER_KEY"], config/master.key, or an environment
+  # key such as config/credentials/production.key. This key is used to decrypt credentials (and other encrypted files).
+  # config.require_master_key = true
+  # Disable serving static files from `public/`, relying on NGINX/Apache to do so instead.
+  # config.public_file_server.enabled = false
+  # Enable serving of images, stylesheets, and JavaScripts from an asset server.
+  # config.asset_host = "http://assets.example.com"
+  # Specifies the header that your server uses for sending files.
+  # config.action_dispatch.x_sendfile_header = "X-Sendfile" # for Apache
+  # config.action_dispatch.x_sendfile_header = "X-Accel-Redirect" # for NGINX
+  # Store uploaded files on the local file system (see config/storage.yml for options).
+  config.active_storage.service = :local
+  # Mount Action Cable outside main process or domain.
+  # config.action_cable.mount_path = nil
+  # config.action_cable.url = "wss://example.com/cable"
+  # config.action_cable.allowed_request_origins = [ "http://example.com", /http:\/\/example.*/ ]
+  # Assume all access to the app is happening through a SSL-terminating reverse proxy.
+  # Can be used together with config.force_ssl for Strict-Transport-Security and secure cookies.
+  # config.assume_ssl = true
+  # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies.
+  config.force_ssl = true
+  # Log to STDOUT by default
+  config.logger = ActiveSupport::Logger.new(STDOUT)
+    .tap  { |logger| logger.formatter = ::Logger::Formatter.new }
+    .then { |logger| ActiveSupport::TaggedLogging.new(logger) }
+  # Prepend all log lines with the following tags.
+  config.log_tags = [ :request_id ]
+  # "info" includes generic and useful information about system operation, but avoids logging too much
+  # information to avoid inadvertent exposure of personally identifiable information (PII). If you
+  # want to log everything, set the level to "debug".
+  config.log_level = ENV.fetch("RAILS_LOG_LEVEL", "info")
+  # Use a different cache store in production.
+  # config.cache_store = :mem_cache_store
+  # Use a real queuing backend for Active Job (and separate queues per environment).
+  # config.active_job.queue_adapter = :resque
+  # config.active_job.queue_name_prefix = "subscriptions_production"
+  config.action_mailer.perform_caching = false
+  # Ignore bad email addresses and do not raise email delivery errors.
+  # Set this to true and configure the email server for immediate delivery to raise delivery errors.
+  # config.action_mailer.raise_delivery_errors = false
+  # Enable locale fallbacks for I18n (makes lookups for any locale fall back to
+  # the I18n.default_locale when a translation cannot be found).
+  config.i18n.fallbacks = true
+  # Don't log any deprecations.
+  config.active_support.report_deprecations = false
+  # Do not dump schema after migrations.
+  config.active_record.dump_schema_after_migration = false
+  # Enable DNS rebinding protection and other `Host` header attacks.
+  # config.hosts = [
+  #   "example.com",     # Allow requests from example.com
+  #   /.*\.example\.com/ # Allow requests from subdomains like `www.example.com`
+  # ]
+  # Skip DNS rebinding protection for the default health check endpoint.
+  # config.host_authorization = { exclude: ->(request) { request.path == "/up" } }
+end

data/examples/subscriptions/config/environments/test.rb ADDED Viewed

@@ -0,0 +1,64 @@
+require "active_support/core_ext/integer/time"
+# The test environment is used exclusively to run your application's
+# test suite. You never need to work with it otherwise. Remember that
+# your test database is "scratch space" for the test suite and is wiped
+# and recreated between test runs. Don't rely on the data there!
+Rails.application.configure do
+  # Settings specified here will take precedence over those in config/application.rb.
+  # While tests run files are not watched, reloading is not necessary.
+  config.enable_reloading = false
+  # Eager loading loads your entire application. When running a single test locally,
+  # this is usually not necessary, and can slow down your test suite. However, it's
+  # recommended that you enable it in continuous integration systems to ensure eager
+  # loading is working properly before deploying your code.
+  config.eager_load = ENV["CI"].present?
+  # Configure public file server for tests with Cache-Control for performance.
+  config.public_file_server.enabled = true
+  config.public_file_server.headers = {
+    "Cache-Control" => "public, max-age=#{1.hour.to_i}"
+  }
+  # Show full error reports and disable caching.
+  config.consider_all_requests_local = true
+  config.action_controller.perform_caching = false
+  config.cache_store = :null_store
+  # Render exception templates for rescuable exceptions and raise for other exceptions.
+  config.action_dispatch.show_exceptions = :rescuable
+  # Disable request forgery protection in test environment.
+  config.action_controller.allow_forgery_protection = false
+  # Store uploaded files on the local file system in a temporary directory.
+  config.active_storage.service = :test
+  config.action_mailer.perform_caching = false
+  # Tell Action Mailer not to deliver emails to the real world.
+  # The :test delivery method accumulates sent emails in the
+  # ActionMailer::Base.deliveries array.
+  config.action_mailer.delivery_method = :test
+  # Print deprecation notices to the stderr.
+  config.active_support.deprecation = :stderr
+  # Raise exceptions for disallowed deprecations.
+  config.active_support.disallowed_deprecation = :raise
+  # Tell Active Support which deprecation messages to disallow.
+  config.active_support.disallowed_deprecation_warnings = []
+  # Raises error for missing translations.
+  # config.i18n.raise_on_missing_translations = true
+  # Annotate rendered view with file names.
+  # config.action_view.annotate_rendered_view_with_filenames = true
+  # Raise error when a before_action's only/except options reference missing actions
+  config.action_controller.raise_on_missing_callback_actions = true
+end

data/examples/subscriptions/config/initializers/content_security_policy.rb ADDED Viewed

@@ -0,0 +1,25 @@
+# Be sure to restart your server when you modify this file.
+# Define an application-wide content security policy.
+# See the Securing Rails Applications Guide for more information:
+# https://guides.rubyonrails.org/security.html#content-security-policy-header
+# Rails.application.configure do
+#   config.content_security_policy do |policy|
+#     policy.default_src :self, :https
+#     policy.font_src    :self, :https, :data
+#     policy.img_src     :self, :https, :data
+#     policy.object_src  :none
+#     policy.script_src  :self, :https
+#     policy.style_src   :self, :https
+#     # Specify URI for violation reports
+#     # policy.report_uri "/csp-violation-report-endpoint"
+#   end
+#
+#   # Generate session nonces for permitted importmap, inline scripts, and inline styles.
+#   config.content_security_policy_nonce_generator = ->(request) { request.session.id.to_s }
+#   config.content_security_policy_nonce_directives = %w(script-src style-src)
+#
+#   # Report violations without enforcing the policy.
+#   # config.content_security_policy_report_only = true
+# end

data/examples/subscriptions/config/initializers/filter_parameter_logging.rb ADDED Viewed

@@ -0,0 +1,8 @@
+# Be sure to restart your server when you modify this file.
+# Configure parameters to be partially matched (e.g. passw matches password) and filtered from the log file.
+# Use this to limit dissemination of sensitive information.
+# See the ActiveSupport::ParameterFilter documentation for supported notations and behaviors.
+Rails.application.config.filter_parameters += [
+  :passw, :secret, :token, :_key, :crypt, :salt, :certificate, :otp, :ssn
+]