@payloadcms/graphql 3.45.0-internal.2f73d3c → 3.45.0

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,KAAK,EAAe,eAAe,EAAE,MAAM,SAAS,CAAA;AAE3D,OAAO,KAAK,OAAO,MAAM,SAAS,CAAA;AAelC,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG;IACvD,MAAM,EAAE,OAAO,CAAC,aAAa,CAAA;IAC7B,eAAe,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,cAAc,EAAE,CAAA;CACxE,CAuGA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,KAAK,EAAe,eAAe,EAAE,MAAM,SAAS,CAAA;AAE3D,OAAO,KAAK,OAAO,MAAM,SAAS,CAAA;AAelC,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG;IACvD,MAAM,EAAE,OAAO,CAAC,aAAa,CAAA;IAC7B,eAAe,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,cAAc,EAAE,CAAA;CACxE,CAwGA"}

package/dist/index.js

@@ -95,6 +95,9 @@ export function configToSchema(config) {
                 maximumComplexity: config.graphQL.maxComplexity,
                 variables: args.variableValues
             }),
+            ...config.graphQL.disableIntrospectionInProduction ? [
+                NoProductionIntrospection
+            ] : [],
             ...typeof config?.graphQL?.validationRules === 'function' ? config.graphQL.validationRules(args) : []
         ];
     return {
@@ -102,5 +105,18 @@ export function configToSchema(config) {
         validationRules
     };
 }
+const NoProductionIntrospection = (context)=>({
+        Field (node) {
+            if (process.env.NODE_ENV === 'production') {
+                if (node.name.value === '__schema' || node.name.value === '__type') {
+                    context.reportError(new GraphQL.GraphQLError('GraphQL introspection is not allowed, but the query contained __schema or __type', {
+                        nodes: [
+                            node
+                        ]
+                    }));
+                }
+            }
+        }
+    });
 
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { OperationArgs } from 'graphql-http'\nimport type { GraphQLInfo, SanitizedConfig } from 'payload'\n\nimport * as GraphQL from 'graphql'\n\nimport {\n  createComplexityRule,\n  fieldExtensionsEstimator,\n  simpleEstimator,\n} from './packages/graphql-query-complexity/index.js'\nimport { accessResolver } from './resolvers/auth/access.js'\nimport { buildFallbackLocaleInputType } from './schema/buildFallbackLocaleInputType.js'\nimport { buildLocaleInputType } from './schema/buildLocaleInputType.js'\nimport { buildPoliciesType } from './schema/buildPoliciesType.js'\nimport { initCollections } from './schema/initCollections.js'\nimport { initGlobals } from './schema/initGlobals.js'\nimport { wrapCustomFields } from './utilities/wrapCustomResolver.js'\n\nexport function configToSchema(config: SanitizedConfig): {\n  schema: GraphQL.GraphQLSchema\n  validationRules: (args: OperationArgs<any>) => GraphQL.ValidationRule[]\n} {\n  const collections = config.collections.reduce((acc, collection) => {\n    acc[collection.slug] = {\n      config: collection,\n    }\n\n    return acc\n  }, {})\n\n  const globals = {\n    config: config.globals,\n  }\n\n  const graphqlResult: GraphQLInfo = {\n    collections,\n    globals,\n    Mutation: {\n      name: 'Mutation',\n      fields: {},\n    },\n    Query: {\n      name: 'Query',\n      fields: {},\n    },\n    types: {\n      arrayTypes: {},\n      blockInputTypes: {},\n      blockTypes: {},\n      groupTypes: {},\n      tabTypes: {},\n    },\n  }\n\n  if (config.localization) {\n    graphqlResult.types['localeInputType'] = buildLocaleInputType(config.localization)\n    graphqlResult.types['fallbackLocaleInputType'] = buildFallbackLocaleInputType(\n      config.localization,\n    )\n  }\n\n  initCollections({ config, graphqlResult })\n  initGlobals({ config, graphqlResult })\n\n  graphqlResult.Query.fields['Access'] = {\n    type: buildPoliciesType(config),\n    resolve: accessResolver(config),\n  }\n\n  if (typeof config.graphQL.queries === 'function') {\n    const customQueries = config.graphQL.queries(GraphQL, {\n      ...graphqlResult,\n      config,\n    })\n    graphqlResult.Query = {\n      ...graphqlResult.Query,\n      fields: {\n        ...graphqlResult.Query.fields,\n        ...wrapCustomFields((customQueries || {}) as never),\n      },\n    }\n  }\n\n  if (typeof config.graphQL.mutations === 'function') {\n    const customMutations = config.graphQL.mutations(GraphQL, {\n      ...graphqlResult,\n      config,\n    })\n    graphqlResult.Mutation = {\n      ...graphqlResult.Mutation,\n      fields: {\n        ...graphqlResult.Mutation.fields,\n        ...wrapCustomFields((customMutations || {}) as never),\n      },\n    }\n  }\n\n  const query = new GraphQL.GraphQLObjectType(graphqlResult.Query)\n  const mutation = new GraphQL.GraphQLObjectType(graphqlResult.Mutation)\n\n  const schema = new GraphQL.GraphQLSchema({\n    mutation,\n    query,\n  })\n\n  const validationRules = (args): GraphQL.ValidationRule[] => [\n    createComplexityRule({\n      estimators: [\n        fieldExtensionsEstimator(),\n        simpleEstimator({ defaultComplexity: 1 }), // Fallback if complexity not set\n      ],\n      maximumComplexity: config.graphQL.maxComplexity,\n      variables: args.variableValues,\n      // onComplete: (complexity) => { console.log('Query Complexity:', complexity); },\n    }),\n    ...(typeof config?.graphQL?.validationRules === 'function'\n      ? config.graphQL.validationRules(args)\n      : []),\n  ]\n\n  return {\n    schema,\n    validationRules,\n  }\n}\n"],"names":["GraphQL","createComplexityRule","fieldExtensionsEstimator","simpleEstimator","accessResolver","buildFallbackLocaleInputType","buildLocaleInputType","buildPoliciesType","initCollections","initGlobals","wrapCustomFields","configToSchema","config","collections","reduce","acc","collection","slug","globals","graphqlResult","Mutation","name","fields","Query","types","arrayTypes","blockInputTypes","blockTypes","groupTypes","tabTypes","localization","type","resolve","graphQL","queries","customQueries","mutations","customMutations","query","GraphQLObjectType","mutation","schema","GraphQLSchema","validationRules","args","estimators","defaultComplexity","maximumComplexity","maxComplexity","variables","variableValues"],"mappings":"AAGA,YAAYA,aAAa,UAAS;AAElC,SACEC,oBAAoB,EACpBC,wBAAwB,EACxBC,eAAe,QACV,+CAA8C;AACrD,SAASC,cAAc,QAAQ,6BAA4B;AAC3D,SAASC,4BAA4B,QAAQ,2CAA0C;AACvF,SAASC,oBAAoB,QAAQ,mCAAkC;AACvE,SAASC,iBAAiB,QAAQ,gCAA+B;AACjE,SAASC,eAAe,QAAQ,8BAA6B;AAC7D,SAASC,WAAW,QAAQ,0BAAyB;AACrD,SAASC,gBAAgB,QAAQ,oCAAmC;AAEpE,OAAO,SAASC,eAAeC,MAAuB;IAIpD,MAAMC,cAAcD,OAAOC,WAAW,CAACC,MAAM,CAAC,CAACC,KAAKC;QAClDD,GAAG,CAACC,WAAWC,IAAI,CAAC,GAAG;YACrBL,QAAQI;QACV;QAEA,OAAOD;IACT,GAAG,CAAC;IAEJ,MAAMG,UAAU;QACdN,QAAQA,OAAOM,OAAO;IACxB;IAEA,MAAMC,gBAA6B;QACjCN;QACAK;QACAE,UAAU;YACRC,MAAM;YACNC,QAAQ,CAAC;QACX;QACAC,OAAO;YACLF,MAAM;YACNC,QAAQ,CAAC;QACX;QACAE,OAAO;YACLC,YAAY,CAAC;YACbC,iBAAiB,CAAC;YAClBC,YAAY,CAAC;YACbC,YAAY,CAAC;YACbC,UAAU,CAAC;QACb;IACF;IAEA,IAAIjB,OAAOkB,YAAY,EAAE;QACvBX,cAAcK,KAAK,CAAC,kBAAkB,GAAGlB,qBAAqBM,OAAOkB,YAAY;QACjFX,cAAcK,KAAK,CAAC,0BAA0B,GAAGnB,6BAC/CO,OAAOkB,YAAY;IAEvB;IAEAtB,gBAAgB;QAAEI;QAAQO;IAAc;IACxCV,YAAY;QAAEG;QAAQO;IAAc;IAEpCA,cAAcI,KAAK,CAACD,MAAM,CAAC,SAAS,GAAG;QACrCS,MAAMxB,kBAAkBK;QACxBoB,SAAS5B,eAAeQ;IAC1B;IAEA,IAAI,OAAOA,OAAOqB,OAAO,CAACC,OAAO,KAAK,YAAY;QAChD,MAAMC,gBAAgBvB,OAAOqB,OAAO,CAACC,OAAO,CAAClC,SAAS;YACpD,GAAGmB,aAAa;YAChBP;QACF;QACAO,cAAcI,KAAK,GAAG;YACpB,GAAGJ,cAAcI,KAAK;YACtBD,QAAQ;gBACN,GAAGH,cAAcI,KAAK,CAACD,MAAM;gBAC7B,GAAGZ,iBAAkByB,iBAAiB,CAAC,EAAY;YACrD;QACF;IACF;IAEA,IAAI,OAAOvB,OAAOqB,OAAO,CAACG,SAAS,KAAK,YAAY;QAClD,MAAMC,kBAAkBzB,OAAOqB,OAAO,CAACG,SAAS,CAACpC,SAAS;YACxD,GAAGmB,aAAa;YAChBP;QACF;QACAO,cAAcC,QAAQ,GAAG;YACvB,GAAGD,cAAcC,QAAQ;YACzBE,QAAQ;gBACN,GAAGH,cAAcC,QAAQ,CAACE,MAAM;gBAChC,GAAGZ,iBAAkB2B,mBAAmB,CAAC,EAAY;YACvD;QACF;IACF;IAEA,MAAMC,QAAQ,IAAItC,QAAQuC,iBAAiB,CAACpB,cAAcI,KAAK;IAC/D,MAAMiB,WAAW,IAAIxC,QAAQuC,iBAAiB,CAACpB,cAAcC,QAAQ;IAErE,MAAMqB,SAAS,IAAIzC,QAAQ0C,aAAa,CAAC;QACvCF;QACAF;IACF;IAEA,MAAMK,kBAAkB,CAACC,OAAmC;YAC1D3C,qBAAqB;gBACnB4C,YAAY;oBACV3C;oBACAC,gBAAgB;wBAAE2C,mBAAmB;oBAAE;iBACxC;gBACDC,mBAAmBnC,OAAOqB,OAAO,CAACe,aAAa;gBAC/CC,WAAWL,KAAKM,cAAc;YAEhC;eACI,OAAOtC,QAAQqB,SAASU,oBAAoB,aAC5C/B,OAAOqB,OAAO,CAACU,eAAe,CAACC,QAC/B,EAAE;SACP;IAED,OAAO;QACLH;QACAE;IACF;AACF"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { OperationArgs } from 'graphql-http'\nimport type { GraphQLInfo, SanitizedConfig } from 'payload'\n\nimport * as GraphQL from 'graphql'\n\nimport {\n  createComplexityRule,\n  fieldExtensionsEstimator,\n  simpleEstimator,\n} from './packages/graphql-query-complexity/index.js'\nimport { accessResolver } from './resolvers/auth/access.js'\nimport { buildFallbackLocaleInputType } from './schema/buildFallbackLocaleInputType.js'\nimport { buildLocaleInputType } from './schema/buildLocaleInputType.js'\nimport { buildPoliciesType } from './schema/buildPoliciesType.js'\nimport { initCollections } from './schema/initCollections.js'\nimport { initGlobals } from './schema/initGlobals.js'\nimport { wrapCustomFields } from './utilities/wrapCustomResolver.js'\n\nexport function configToSchema(config: SanitizedConfig): {\n  schema: GraphQL.GraphQLSchema\n  validationRules: (args: OperationArgs<any>) => GraphQL.ValidationRule[]\n} {\n  const collections = config.collections.reduce((acc, collection) => {\n    acc[collection.slug] = {\n      config: collection,\n    }\n\n    return acc\n  }, {})\n\n  const globals = {\n    config: config.globals,\n  }\n\n  const graphqlResult: GraphQLInfo = {\n    collections,\n    globals,\n    Mutation: {\n      name: 'Mutation',\n      fields: {},\n    },\n    Query: {\n      name: 'Query',\n      fields: {},\n    },\n    types: {\n      arrayTypes: {},\n      blockInputTypes: {},\n      blockTypes: {},\n      groupTypes: {},\n      tabTypes: {},\n    },\n  }\n\n  if (config.localization) {\n    graphqlResult.types['localeInputType'] = buildLocaleInputType(config.localization)\n    graphqlResult.types['fallbackLocaleInputType'] = buildFallbackLocaleInputType(\n      config.localization,\n    )\n  }\n\n  initCollections({ config, graphqlResult })\n  initGlobals({ config, graphqlResult })\n\n  graphqlResult.Query.fields['Access'] = {\n    type: buildPoliciesType(config),\n    resolve: accessResolver(config),\n  }\n\n  if (typeof config.graphQL.queries === 'function') {\n    const customQueries = config.graphQL.queries(GraphQL, {\n      ...graphqlResult,\n      config,\n    })\n    graphqlResult.Query = {\n      ...graphqlResult.Query,\n      fields: {\n        ...graphqlResult.Query.fields,\n        ...wrapCustomFields((customQueries || {}) as never),\n      },\n    }\n  }\n\n  if (typeof config.graphQL.mutations === 'function') {\n    const customMutations = config.graphQL.mutations(GraphQL, {\n      ...graphqlResult,\n      config,\n    })\n    graphqlResult.Mutation = {\n      ...graphqlResult.Mutation,\n      fields: {\n        ...graphqlResult.Mutation.fields,\n        ...wrapCustomFields((customMutations || {}) as never),\n      },\n    }\n  }\n\n  const query = new GraphQL.GraphQLObjectType(graphqlResult.Query)\n  const mutation = new GraphQL.GraphQLObjectType(graphqlResult.Mutation)\n\n  const schema = new GraphQL.GraphQLSchema({\n    mutation,\n    query,\n  })\n\n  const validationRules = (args): GraphQL.ValidationRule[] => [\n    createComplexityRule({\n      estimators: [\n        fieldExtensionsEstimator(),\n        simpleEstimator({ defaultComplexity: 1 }), // Fallback if complexity not set\n      ],\n      maximumComplexity: config.graphQL.maxComplexity,\n      variables: args.variableValues,\n      // onComplete: (complexity) => { console.log('Query Complexity:', complexity); },\n    }),\n    ...(config.graphQL.disableIntrospectionInProduction ? [NoProductionIntrospection] : []),\n    ...(typeof config?.graphQL?.validationRules === 'function'\n      ? config.graphQL.validationRules(args)\n      : []),\n  ]\n\n  return {\n    schema,\n    validationRules,\n  }\n}\n\nconst NoProductionIntrospection: GraphQL.ValidationRule = (context) => ({\n  Field(node) {\n    if (process.env.NODE_ENV === 'production') {\n      if (node.name.value === '__schema' || node.name.value === '__type') {\n        context.reportError(\n          new GraphQL.GraphQLError(\n            'GraphQL introspection is not allowed, but the query contained __schema or __type',\n            { nodes: [node] },\n          ),\n        )\n      }\n    }\n  },\n})\n"],"names":["GraphQL","createComplexityRule","fieldExtensionsEstimator","simpleEstimator","accessResolver","buildFallbackLocaleInputType","buildLocaleInputType","buildPoliciesType","initCollections","initGlobals","wrapCustomFields","configToSchema","config","collections","reduce","acc","collection","slug","globals","graphqlResult","Mutation","name","fields","Query","types","arrayTypes","blockInputTypes","blockTypes","groupTypes","tabTypes","localization","type","resolve","graphQL","queries","customQueries","mutations","customMutations","query","GraphQLObjectType","mutation","schema","GraphQLSchema","validationRules","args","estimators","defaultComplexity","maximumComplexity","maxComplexity","variables","variableValues","disableIntrospectionInProduction","NoProductionIntrospection","context","Field","node","process","env","NODE_ENV","value","reportError","GraphQLError","nodes"],"mappings":"AAGA,YAAYA,aAAa,UAAS;AAElC,SACEC,oBAAoB,EACpBC,wBAAwB,EACxBC,eAAe,QACV,+CAA8C;AACrD,SAASC,cAAc,QAAQ,6BAA4B;AAC3D,SAASC,4BAA4B,QAAQ,2CAA0C;AACvF,SAASC,oBAAoB,QAAQ,mCAAkC;AACvE,SAASC,iBAAiB,QAAQ,gCAA+B;AACjE,SAASC,eAAe,QAAQ,8BAA6B;AAC7D,SAASC,WAAW,QAAQ,0BAAyB;AACrD,SAASC,gBAAgB,QAAQ,oCAAmC;AAEpE,OAAO,SAASC,eAAeC,MAAuB;IAIpD,MAAMC,cAAcD,OAAOC,WAAW,CAACC,MAAM,CAAC,CAACC,KAAKC;QAClDD,GAAG,CAACC,WAAWC,IAAI,CAAC,GAAG;YACrBL,QAAQI;QACV;QAEA,OAAOD;IACT,GAAG,CAAC;IAEJ,MAAMG,UAAU;QACdN,QAAQA,OAAOM,OAAO;IACxB;IAEA,MAAMC,gBAA6B;QACjCN;QACAK;QACAE,UAAU;YACRC,MAAM;YACNC,QAAQ,CAAC;QACX;QACAC,OAAO;YACLF,MAAM;YACNC,QAAQ,CAAC;QACX;QACAE,OAAO;YACLC,YAAY,CAAC;YACbC,iBAAiB,CAAC;YAClBC,YAAY,CAAC;YACbC,YAAY,CAAC;YACbC,UAAU,CAAC;QACb;IACF;IAEA,IAAIjB,OAAOkB,YAAY,EAAE;QACvBX,cAAcK,KAAK,CAAC,kBAAkB,GAAGlB,qBAAqBM,OAAOkB,YAAY;QACjFX,cAAcK,KAAK,CAAC,0BAA0B,GAAGnB,6BAC/CO,OAAOkB,YAAY;IAEvB;IAEAtB,gBAAgB;QAAEI;QAAQO;IAAc;IACxCV,YAAY;QAAEG;QAAQO;IAAc;IAEpCA,cAAcI,KAAK,CAACD,MAAM,CAAC,SAAS,GAAG;QACrCS,MAAMxB,kBAAkBK;QACxBoB,SAAS5B,eAAeQ;IAC1B;IAEA,IAAI,OAAOA,OAAOqB,OAAO,CAACC,OAAO,KAAK,YAAY;QAChD,MAAMC,gBAAgBvB,OAAOqB,OAAO,CAACC,OAAO,CAAClC,SAAS;YACpD,GAAGmB,aAAa;YAChBP;QACF;QACAO,cAAcI,KAAK,GAAG;YACpB,GAAGJ,cAAcI,KAAK;YACtBD,QAAQ;gBACN,GAAGH,cAAcI,KAAK,CAACD,MAAM;gBAC7B,GAAGZ,iBAAkByB,iBAAiB,CAAC,EAAY;YACrD;QACF;IACF;IAEA,IAAI,OAAOvB,OAAOqB,OAAO,CAACG,SAAS,KAAK,YAAY;QAClD,MAAMC,kBAAkBzB,OAAOqB,OAAO,CAACG,SAAS,CAACpC,SAAS;YACxD,GAAGmB,aAAa;YAChBP;QACF;QACAO,cAAcC,QAAQ,GAAG;YACvB,GAAGD,cAAcC,QAAQ;YACzBE,QAAQ;gBACN,GAAGH,cAAcC,QAAQ,CAACE,MAAM;gBAChC,GAAGZ,iBAAkB2B,mBAAmB,CAAC,EAAY;YACvD;QACF;IACF;IAEA,MAAMC,QAAQ,IAAItC,QAAQuC,iBAAiB,CAACpB,cAAcI,KAAK;IAC/D,MAAMiB,WAAW,IAAIxC,QAAQuC,iBAAiB,CAACpB,cAAcC,QAAQ;IAErE,MAAMqB,SAAS,IAAIzC,QAAQ0C,aAAa,CAAC;QACvCF;QACAF;IACF;IAEA,MAAMK,kBAAkB,CAACC,OAAmC;YAC1D3C,qBAAqB;gBACnB4C,YAAY;oBACV3C;oBACAC,gBAAgB;wBAAE2C,mBAAmB;oBAAE;iBACxC;gBACDC,mBAAmBnC,OAAOqB,OAAO,CAACe,aAAa;gBAC/CC,WAAWL,KAAKM,cAAc;YAEhC;eACItC,OAAOqB,OAAO,CAACkB,gCAAgC,GAAG;gBAACC;aAA0B,GAAG,EAAE;eAClF,OAAOxC,QAAQqB,SAASU,oBAAoB,aAC5C/B,OAAOqB,OAAO,CAACU,eAAe,CAACC,QAC/B,EAAE;SACP;IAED,OAAO;QACLH;QACAE;IACF;AACF;AAEA,MAAMS,4BAAoD,CAACC,UAAa,CAAA;QACtEC,OAAMC,IAAI;YACR,IAAIC,QAAQC,GAAG,CAACC,QAAQ,KAAK,cAAc;gBACzC,IAAIH,KAAKlC,IAAI,CAACsC,KAAK,KAAK,cAAcJ,KAAKlC,IAAI,CAACsC,KAAK,KAAK,UAAU;oBAClEN,QAAQO,WAAW,CACjB,IAAI5D,QAAQ6D,YAAY,CACtB,oFACA;wBAAEC,OAAO;4BAACP;yBAAK;oBAAC;gBAGtB;YACF;QACF;IACF,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/graphql",
-  "version": "3.45.0-internal.2f73d3c",
+  "version": "3.45.0",
   "homepage": "https://payloadcms.com",
   "repository": {
     "type": "git",
@@ -53,11 +53,11 @@
     "@types/pluralize": "^0.0.33",
     "graphql-http": "^1.22.0",
     "@payloadcms/eslint-config": "3.28.0",
-    "payload": "3.45.0-internal.2f73d3c"
+    "payload": "3.45.0"
   },
   "peerDependencies": {
     "graphql": "^16.8.1",
-    "payload": "3.45.0-internal.2f73d3c"
+    "payload": "3.45.0"
   },
   "scripts": {
     "build": "pnpm build:types && pnpm build:swc",