@strapi/plugin-graphql 0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282 → 0.0.0-experimental.63624e21eb5b0713345a0cf2f68f1c40eab427bc

package/dist/admin/index.js

@@ -13,6 +13,7 @@ function __variableDynamicImportRuntime0__(path) {
     case './translations/en.json': return Promise.resolve().then(function () { return /*#__PURE__*/_interopNamespaceDefaultOnly(require('./translations/en.json.js')); });
     case './translations/es.json': return Promise.resolve().then(function () { return /*#__PURE__*/_interopNamespaceDefaultOnly(require('./translations/es.json.js')); });
     case './translations/fr.json': return Promise.resolve().then(function () { return /*#__PURE__*/_interopNamespaceDefaultOnly(require('./translations/fr.json.js')); });
+    case './translations/ko.json': return Promise.resolve().then(function () { return /*#__PURE__*/_interopNamespaceDefaultOnly(require('./translations/ko.json.js')); });
     case './translations/pl.json': return Promise.resolve().then(function () { return /*#__PURE__*/_interopNamespaceDefaultOnly(require('./translations/pl.json.js')); });
     case './translations/ru.json': return Promise.resolve().then(function () { return /*#__PURE__*/_interopNamespaceDefaultOnly(require('./translations/ru.json.js')); });
     case './translations/sk.json': return Promise.resolve().then(function () { return /*#__PURE__*/_interopNamespaceDefaultOnly(require('./translations/sk.json.js')); });
@@ -31,7 +32,6 @@ function __variableDynamicImportRuntime0__(path) {
 const name = _package.default.strapi.name;
 // eslint-disable-next-line import/no-default-export
 var index = {
-    // TODO: we need to have the type for StrapiApp done from `@strapi/admin` package.
     register (app) {
         app.registerPlugin({
             id: pluginId.pluginId,

package/dist/admin/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../admin/src/index.ts"],"sourcesContent":["import pluginPkg from '../../package.json';\n\nimport { pluginId } from './pluginId';\nimport { prefixPluginTranslations } from './utils/prefixPluginTranslations';\n\nconst name = pluginPkg.strapi.name;\n\n// eslint-disable-next-line import/no-default-export\nexport default {\n  // TODO: we need to have the type for StrapiApp done from `@strapi/admin` package.\n  register(app: any) {\n    app.registerPlugin({\n      id: pluginId,\n      name,\n    });\n  },\n  bootstrap() {},\n  async registerTrads({ locales }: { locales: string[] }) {\n    const importedTrads = await Promise.all(\n      locales.map((locale) => {\n        return import(`./translations/${locale}.json`)\n          .then(({ default: data }) => {\n            return {\n              data: prefixPluginTranslations(data, pluginId),\n              locale,\n            };\n          })\n          .catch(() => {\n            return {\n              data: {},\n              locale,\n            };\n          });\n      })\n    );\n\n    return Promise.resolve(importedTrads);\n  },\n};\n"],"names":["name","pluginPkg","strapi","register","app","registerPlugin","id","pluginId","bootstrap","registerTrads","locales","importedTrads","Promise","all","map","locale","then","default","data","prefixPluginTranslations","catch","resolve"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,MAAMA,IAAAA,GAAOC,gBAAAA,CAAUC,MAAM,CAACF,IAAI;AAElC;AACA,YAAe;;AAEbG,IAAAA,QAAAA,CAAAA,CAASC,GAAQ,EAAA;AACfA,QAAAA,GAAAA,CAAIC,cAAc,CAAC;YACjBC,EAAAA,EAAIC,iBAAAA;AACJP,YAAAA;AACF,SAAA,CAAA;AACF,IAAA,CAAA;IACAQ,SAAAA,CAAAA,GAAAA,CAAa,CAAA;IACb,MAAMC,aAAAA,CAAAA,CAAc,EAAEC,OAAO,EAAyB,EAAA;QACpD,MAAMC,aAAAA,GAAgB,MAAMC,OAAAA,CAAQC,GAAG,CACrCH,OAAAA,CAAQI,GAAG,CAAC,CAACC,MAAAA,GAAAA;AACX,YAAA,OAAO,iCAAM,CAAC,CAAC,eAAe,EAAEA,MAAAA,CAAO,KAAK,CAAC,CAAA,CAC1CC,IAAI,CAAC,CAAC,EAAEC,OAAAA,EAASC,IAAI,EAAE,GAAA;gBACtB,OAAO;AACLA,oBAAAA,IAAAA,EAAMC,kDAAyBD,IAAAA,EAAMX,iBAAAA,CAAAA;AACrCQ,oBAAAA;AACF,iBAAA;AACF,YAAA,CAAA,CAAA,CACCK,KAAK,CAAC,IAAA;gBACL,OAAO;AACLF,oBAAAA,IAAAA,EAAM,EAAC;AACPH,oBAAAA;AACF,iBAAA;AACF,YAAA,CAAA,CAAA;AACJ,QAAA,CAAA,CAAA,CAAA;QAGF,OAAOH,OAAAA,CAAQS,OAAO,CAACV,aAAAA,CAAAA;AACzB,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"index.js","sources":["../../admin/src/index.ts"],"sourcesContent":["import pluginPkg from '../../package.json';\n\nimport { pluginId } from './pluginId';\nimport { prefixPluginTranslations } from './utils/prefixPluginTranslations';\n\nimport type { StrapiApp } from '@strapi/admin/strapi-admin';\n\nconst name = pluginPkg.strapi.name;\n\n// eslint-disable-next-line import/no-default-export\nexport default {\n  register(app: StrapiApp) {\n    app.registerPlugin({\n      id: pluginId,\n      name,\n    });\n  },\n  bootstrap() {},\n  async registerTrads({ locales }: { locales: string[] }) {\n    const importedTrads = await Promise.all(\n      locales.map((locale) => {\n        return import(`./translations/${locale}.json`)\n          .then(({ default: data }) => {\n            return {\n              data: prefixPluginTranslations(data, pluginId),\n              locale,\n            };\n          })\n          .catch(() => {\n            return {\n              data: {},\n              locale,\n            };\n          });\n      })\n    );\n\n    return Promise.resolve(importedTrads);\n  },\n};\n"],"names":["name","pluginPkg","strapi","register","app","registerPlugin","id","pluginId","bootstrap","registerTrads","locales","importedTrads","Promise","all","map","locale","then","default","data","prefixPluginTranslations","catch","resolve"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,MAAMA,IAAAA,GAAOC,gBAAAA,CAAUC,MAAM,CAACF,IAAI;AAElC;AACA,YAAe;AACbG,IAAAA,QAAAA,CAAAA,CAASC,GAAc,EAAA;AACrBA,QAAAA,GAAAA,CAAIC,cAAc,CAAC;YACjBC,EAAAA,EAAIC,iBAAAA;AACJP,YAAAA;AACF,SAAA,CAAA;AACF,IAAA,CAAA;IACAQ,SAAAA,CAAAA,GAAAA,CAAa,CAAA;IACb,MAAMC,aAAAA,CAAAA,CAAc,EAAEC,OAAO,EAAyB,EAAA;QACpD,MAAMC,aAAAA,GAAgB,MAAMC,OAAAA,CAAQC,GAAG,CACrCH,OAAAA,CAAQI,GAAG,CAAC,CAACC,MAAAA,GAAAA;AACX,YAAA,OAAO,iCAAM,CAAC,CAAC,eAAe,EAAEA,MAAAA,CAAO,KAAK,CAAC,CAAA,CAC1CC,IAAI,CAAC,CAAC,EAAEC,OAAAA,EAASC,IAAI,EAAE,GAAA;gBACtB,OAAO;AACLA,oBAAAA,IAAAA,EAAMC,kDAAyBD,IAAAA,EAAMX,iBAAAA,CAAAA;AACrCQ,oBAAAA;AACF,iBAAA;AACF,YAAA,CAAA,CAAA,CACCK,KAAK,CAAC,IAAA;gBACL,OAAO;AACLF,oBAAAA,IAAAA,EAAM,EAAC;AACPH,oBAAAA;AACF,iBAAA;AACF,YAAA,CAAA,CAAA;AACJ,QAAA,CAAA,CAAA,CAAA;QAGF,OAAOH,OAAAA,CAAQS,OAAO,CAACV,aAAAA,CAAAA;AACzB,IAAA;AACF,CAAA;;;;"}

package/dist/admin/index.mjs

@@ -9,6 +9,7 @@ function __variableDynamicImportRuntime0__(path) {
     case './translations/en.json': return import('./translations/en.json.mjs');
     case './translations/es.json': return import('./translations/es.json.mjs');
     case './translations/fr.json': return import('./translations/fr.json.mjs');
+    case './translations/ko.json': return import('./translations/ko.json.mjs');
     case './translations/pl.json': return import('./translations/pl.json.mjs');
     case './translations/ru.json': return import('./translations/ru.json.mjs');
     case './translations/sk.json': return import('./translations/sk.json.mjs');
@@ -27,7 +28,6 @@ function __variableDynamicImportRuntime0__(path) {
 const name = pluginPkg.strapi.name;
 // eslint-disable-next-line import/no-default-export
 var index = {
-    // TODO: we need to have the type for StrapiApp done from `@strapi/admin` package.
     register (app) {
         app.registerPlugin({
             id: pluginId,

package/dist/admin/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../../admin/src/index.ts"],"sourcesContent":["import pluginPkg from '../../package.json';\n\nimport { pluginId } from './pluginId';\nimport { prefixPluginTranslations } from './utils/prefixPluginTranslations';\n\nconst name = pluginPkg.strapi.name;\n\n// eslint-disable-next-line import/no-default-export\nexport default {\n  // TODO: we need to have the type for StrapiApp done from `@strapi/admin` package.\n  register(app: any) {\n    app.registerPlugin({\n      id: pluginId,\n      name,\n    });\n  },\n  bootstrap() {},\n  async registerTrads({ locales }: { locales: string[] }) {\n    const importedTrads = await Promise.all(\n      locales.map((locale) => {\n        return import(`./translations/${locale}.json`)\n          .then(({ default: data }) => {\n            return {\n              data: prefixPluginTranslations(data, pluginId),\n              locale,\n            };\n          })\n          .catch(() => {\n            return {\n              data: {},\n              locale,\n            };\n          });\n      })\n    );\n\n    return Promise.resolve(importedTrads);\n  },\n};\n"],"names":["name","pluginPkg","strapi","register","app","registerPlugin","id","pluginId","bootstrap","registerTrads","locales","importedTrads","Promise","all","map","locale","then","default","data","prefixPluginTranslations","catch","resolve"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,MAAMA,IAAAA,GAAOC,SAAAA,CAAUC,MAAM,CAACF,IAAI;AAElC;AACA,YAAe;;AAEbG,IAAAA,QAAAA,CAAAA,CAASC,GAAQ,EAAA;AACfA,QAAAA,GAAAA,CAAIC,cAAc,CAAC;YACjBC,EAAAA,EAAIC,QAAAA;AACJP,YAAAA;AACF,SAAA,CAAA;AACF,IAAA,CAAA;IACAQ,SAAAA,CAAAA,GAAAA,CAAa,CAAA;IACb,MAAMC,aAAAA,CAAAA,CAAc,EAAEC,OAAO,EAAyB,EAAA;QACpD,MAAMC,aAAAA,GAAgB,MAAMC,OAAAA,CAAQC,GAAG,CACrCH,OAAAA,CAAQI,GAAG,CAAC,CAACC,MAAAA,GAAAA;AACX,YAAA,OAAO,iCAAM,CAAC,CAAC,eAAe,EAAEA,MAAAA,CAAO,KAAK,CAAC,CAAA,CAC1CC,IAAI,CAAC,CAAC,EAAEC,OAAAA,EAASC,IAAI,EAAE,GAAA;gBACtB,OAAO;AACLA,oBAAAA,IAAAA,EAAMC,yBAAyBD,IAAAA,EAAMX,QAAAA,CAAAA;AACrCQ,oBAAAA;AACF,iBAAA;AACF,YAAA,CAAA,CAAA,CACCK,KAAK,CAAC,IAAA;gBACL,OAAO;AACLF,oBAAAA,IAAAA,EAAM,EAAC;AACPH,oBAAAA;AACF,iBAAA;AACF,YAAA,CAAA,CAAA;AACJ,QAAA,CAAA,CAAA,CAAA;QAGF,OAAOH,OAAAA,CAAQS,OAAO,CAACV,aAAAA,CAAAA;AACzB,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"index.mjs","sources":["../../admin/src/index.ts"],"sourcesContent":["import pluginPkg from '../../package.json';\n\nimport { pluginId } from './pluginId';\nimport { prefixPluginTranslations } from './utils/prefixPluginTranslations';\n\nimport type { StrapiApp } from '@strapi/admin/strapi-admin';\n\nconst name = pluginPkg.strapi.name;\n\n// eslint-disable-next-line import/no-default-export\nexport default {\n  register(app: StrapiApp) {\n    app.registerPlugin({\n      id: pluginId,\n      name,\n    });\n  },\n  bootstrap() {},\n  async registerTrads({ locales }: { locales: string[] }) {\n    const importedTrads = await Promise.all(\n      locales.map((locale) => {\n        return import(`./translations/${locale}.json`)\n          .then(({ default: data }) => {\n            return {\n              data: prefixPluginTranslations(data, pluginId),\n              locale,\n            };\n          })\n          .catch(() => {\n            return {\n              data: {},\n              locale,\n            };\n          });\n      })\n    );\n\n    return Promise.resolve(importedTrads);\n  },\n};\n"],"names":["name","pluginPkg","strapi","register","app","registerPlugin","id","pluginId","bootstrap","registerTrads","locales","importedTrads","Promise","all","map","locale","then","default","data","prefixPluginTranslations","catch","resolve"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,MAAMA,IAAAA,GAAOC,SAAAA,CAAUC,MAAM,CAACF,IAAI;AAElC;AACA,YAAe;AACbG,IAAAA,QAAAA,CAAAA,CAASC,GAAc,EAAA;AACrBA,QAAAA,GAAAA,CAAIC,cAAc,CAAC;YACjBC,EAAAA,EAAIC,QAAAA;AACJP,YAAAA;AACF,SAAA,CAAA;AACF,IAAA,CAAA;IACAQ,SAAAA,CAAAA,GAAAA,CAAa,CAAA;IACb,MAAMC,aAAAA,CAAAA,CAAc,EAAEC,OAAO,EAAyB,EAAA;QACpD,MAAMC,aAAAA,GAAgB,MAAMC,OAAAA,CAAQC,GAAG,CACrCH,OAAAA,CAAQI,GAAG,CAAC,CAACC,MAAAA,GAAAA;AACX,YAAA,OAAO,iCAAM,CAAC,CAAC,eAAe,EAAEA,MAAAA,CAAO,KAAK,CAAC,CAAA,CAC1CC,IAAI,CAAC,CAAC,EAAEC,OAAAA,EAASC,IAAI,EAAE,GAAA;gBACtB,OAAO;AACLA,oBAAAA,IAAAA,EAAMC,yBAAyBD,IAAAA,EAAMX,QAAAA,CAAAA;AACrCQ,oBAAAA;AACF,iBAAA;AACF,YAAA,CAAA,CAAA,CACCK,KAAK,CAAC,IAAA;gBACL,OAAO;AACLF,oBAAAA,IAAAA,EAAM,EAAC;AACPH,oBAAAA;AACF,iBAAA;AACF,YAAA,CAAA,CAAA;AACJ,QAAA,CAAA,CAAA,CAAA;QAGF,OAAOH,OAAAA,CAAQS,OAAO,CAACV,aAAAA,CAAAA;AACzB,IAAA;AACF,CAAA;;;;"}

package/dist/admin/package.json.js

@@ -5,8 +5,7 @@ Object.defineProperty(exports, '__esModule', { value: true });
 var strapi = {
     name: "graphql"};
 var pluginPkg = {
-    strapi: strapi
-};
+    strapi: strapi};
 
 exports.default = pluginPkg;
 exports.strapi = strapi;

package/dist/admin/package.json.js.map

@@ -1 +1 @@
-{"version":3,"file":"package.json.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;"}
+{"version":3,"file":"package.json.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;"}

package/dist/admin/package.json.mjs

@@ -1,8 +1,7 @@
 var strapi = {
     name: "graphql"};
 var pluginPkg = {
-    strapi: strapi
-};
+    strapi: strapi};
 
 export { pluginPkg as default, strapi };
 //# sourceMappingURL=package.json.mjs.map

package/dist/admin/package.json.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"package.json.mjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;"}
+{"version":3,"file":"package.json.mjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;"}

package/dist/admin/src/index.d.ts

@@ -1,5 +1,6 @@
+import type { StrapiApp } from '@strapi/admin/strapi-admin';
 declare const _default: {
-    register(app: any): void;
+    register(app: StrapiApp): void;
     bootstrap(): void;
     registerTrads({ locales }: {
         locales: string[];

package/dist/admin/translations/ko.json.js

@@ -0,0 +1,10 @@
+'use strict';
+
+var ko = {
+    "plugin.description.long": "기본 API 메서드를 포함한 GraphQL 엔드포인트를 추가합니다.",
+    "plugin.description.short": "기본 API 메서드를 포함한 GraphQL 엔드포인트를 추가합니다.",
+    "plugin.name": "GraphQL"
+};
+
+module.exports = ko;
+//# sourceMappingURL=ko.json.js.map

package/dist/admin/translations/ko.json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ko.json.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;"}

package/dist/admin/translations/ko.json.mjs

@@ -0,0 +1,8 @@
+var ko = {
+    "plugin.description.long": "기본 API 메서드를 포함한 GraphQL 엔드포인트를 추가합니다.",
+    "plugin.description.short": "기본 API 메서드를 포함한 GraphQL 엔드포인트를 추가합니다.",
+    "plugin.name": "GraphQL"
+};
+
+export { ko as default };
+//# sourceMappingURL=ko.json.mjs.map

package/dist/admin/translations/ko.json.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ko.json.mjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;"}

package/dist/server/bootstrap.js

@@ -1,6 +1,6 @@
 'use strict';
 
-var fp = require('lodash/fp');
+var lodash = require('lodash');
 var server = require('@apollo/server');
 var _default = require('@apollo/server/plugin/landingPage/default');
 var koa = require('@as-integrations/koa');
@@ -15,11 +15,19 @@ var depthLimit__default = /*#__PURE__*/_interopDefault(depthLimit);
 var bodyParser__default = /*#__PURE__*/_interopDefault(bodyParser);
 var cors__default = /*#__PURE__*/_interopDefault(cors);
 
-const merge = fp.mergeWith((a, b)=>{
-    if (fp.isArray(a) && fp.isArray(b)) {
-        return a.concat(b);
+const getOperationLimitsWarning = ({ depthLimit: configuredDepthLimit, maxLimit })=>{
+    const unboundedOrInvalidKeys = [];
+    if (typeof configuredDepthLimit !== 'number' || !Number.isFinite(configuredDepthLimit) || configuredDepthLimit <= 0) {
+        unboundedOrInvalidKeys.push('depthLimit');
     }
-});
+    if (typeof maxLimit !== 'number' || !Number.isFinite(maxLimit) || maxLimit <= 0) {
+        unboundedOrInvalidKeys.push('maxLimit');
+    }
+    if (unboundedOrInvalidKeys.length === 0) {
+        return undefined;
+    }
+    return `Built-in GraphQL operation limits are unbounded or invalid for: ${unboundedOrInvalidKeys.join(', ')}. Configure these limits (for example: defaultLimit: 25, maxLimit: 100, depthLimit: 10). Custom Apollo validation rules may independently enforce limits. See https://docs.strapi.io/cms/configurations/plugins.`;
+};
 const determineLandingPage = (strapi)=>{
     const { config } = strapi.plugin('graphql');
     const utils = strapi.plugin('graphql').service('utils');
@@ -74,7 +82,7 @@ const determineLandingPage = (strapi)=>{
         return isProduction ? prodLanding() : localLanding();
     }
     // if user provided a landing page function, return that
-    if (fp.isFunction(configLandingPage)) {
+    if (typeof configLandingPage === 'function') {
         return userLanding(configLandingPage);
     }
     // If no other setting could be found, default to production settings
@@ -84,12 +92,21 @@ const determineLandingPage = (strapi)=>{
 async function bootstrap({ strapi }) {
     // Generate the GraphQL schema for the content API
     const schema = strapi.plugin('graphql').service('content-api').buildSchema();
-    if (fp.isEmpty(schema)) {
+    if (lodash.isEmpty(schema)) {
         strapi.log.warn('The GraphQL schema has not been generated because it is empty');
         return;
     }
     const { config } = strapi.plugin('graphql');
     const path = config('endpoint');
+    const configuredDepthLimit = config('depthLimit');
+    const maxLimit = config('maxLimit');
+    const operationLimitsWarning = getOperationLimitsWarning({
+        depthLimit: configuredDepthLimit,
+        maxLimit
+    });
+    if (operationLimitsWarning) {
+        strapi.log.warn(operationLimitsWarning);
+    }
     const landingPage = determineLandingPage(strapi);
     /**
    * We need the arguments passed to the root query to be available in the association resolver
@@ -125,8 +142,10 @@ async function bootstrap({ strapi }) {
         // Schema
         schema,
         // Validation
+        // Keep v5 compatibility: depthLimit is passed through unchanged, so an unset or invalid value
+        // does not become an enforced finite limit during an upgrade.
         validationRules: [
-            depthLimit__default.default(config('depthLimit'))
+            depthLimit__default.default(configuredDepthLimit)
         ],
         // Errors
         formatError: formatGraphqlError.formatGraphqlError,
@@ -142,7 +161,12 @@ async function bootstrap({ strapi }) {
         ],
         cache: 'bounded'
     };
-    const serverConfig = merge(defaultServerConfig, config('apolloServer'));
+    const serverConfig = lodash.mergeWith({}, defaultServerConfig, config('apolloServer'), (a, b)=>{
+        if (Array.isArray(a) && Array.isArray(b)) {
+            return a.concat(b);
+        }
+        return undefined;
+    });
     // Create a new Apollo server
     const server$1 = new server.ApolloServer(serverConfig);
     try {
@@ -165,7 +189,7 @@ async function bootstrap({ strapi }) {
         handler.push(cors__default.default(serverConfig.cors));
     }
     // add koa bodyparser middleware
-    if (fp.isObject(serverConfig.bodyParserConfig)) {
+    if (lodash.isObject(serverConfig.bodyParserConfig)) {
         handler.push(bodyParser__default.default(serverConfig.bodyParserConfig));
     } else if (serverConfig.bodyParserConfig) {
         handler.push(bodyParser__default.default());
@@ -218,4 +242,5 @@ async function bootstrap({ strapi }) {
 
 exports.bootstrap = bootstrap;
 exports.determineLandingPage = determineLandingPage;
+exports.getOperationLimitsWarning = getOperationLimitsWarning;
 //# sourceMappingURL=bootstrap.js.map

package/dist/server/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sources":["../../server/src/bootstrap.ts"],"sourcesContent":["import { isEmpty, mergeWith, isArray, isObject, isFunction } from 'lodash/fp';\nimport { ApolloServer, type ApolloServerPlugin, type ApolloServerOptions } from '@apollo/server';\nimport {\n  ApolloServerPluginLandingPageLocalDefault,\n  ApolloServerPluginLandingPageProductionDefault,\n} from '@apollo/server/plugin/landingPage/default';\nimport { koaMiddleware } from '@as-integrations/koa';\nimport depthLimit from 'graphql-depth-limit';\nimport bodyParser from 'koa-bodyparser';\nimport cors from '@koa/cors';\n\nimport type { Core } from '@strapi/types';\nimport type { Options } from '@koa/cors';\nimport type { BaseContext, DefaultContextExtends, DefaultStateExtends } from 'koa';\n\nimport { formatGraphqlError } from './format-graphql-error';\n\nconst merge = mergeWith((a, b) => {\n  if (isArray(a) && isArray(b)) {\n    return a.concat(b);\n  }\n});\n\ntype StrapiGraphQLContext = BaseContext & {\n  rootQueryArgsByPath?: Map<string | number, Record<string, unknown>>;\n};\n\nexport const determineLandingPage = (\n  strapi: Core.Strapi\n): ApolloServerPlugin<StrapiGraphQLContext> => {\n  const { config } = strapi.plugin('graphql');\n  const utils = strapi.plugin('graphql').service('utils');\n\n  /**\n   * configLanding page may be one of the following:\n   *\n   * - true: always use \"playground\" even in production\n   * - false: never show \"playground\" even in non-production\n   * - undefined: default Apollo behavior (hide playground on production)\n   * - a function that returns an Apollo plugin that implements renderLandingPage\n   ** */\n  const configLandingPage = config('landingPage');\n\n  const isProduction = process.env.NODE_ENV === 'production';\n\n  const localLanding = () => {\n    strapi.log.debug('Apollo landing page: local');\n    utils.playground.setEnabled(true);\n    return ApolloServerPluginLandingPageLocalDefault();\n  };\n\n  const prodLanding = () => {\n    strapi.log.debug('Apollo landing page: production');\n    utils.playground.setEnabled(false);\n    return ApolloServerPluginLandingPageProductionDefault();\n  };\n\n  const userLanding = (userFunction: (strapi?: Core.Strapi) => ApolloServerPlugin | boolean) => {\n    strapi.log.debug('Apollo landing page: from user-defined function...');\n    const result = userFunction(strapi);\n    if (result === true) {\n      return localLanding();\n    }\n    if (result === false) {\n      return prodLanding();\n    }\n    strapi.log.debug('Apollo landing page: user-defined');\n    return result;\n  };\n\n  // DEPRECATED, remove in Strapi v6\n  const playgroundAlways = config('playgroundAlways');\n  if (playgroundAlways !== undefined) {\n    strapi.log.warn(\n      'The graphql config playgroundAlways is deprecated. This will be removed in Strapi 6. Please use landingPage instead. '\n    );\n  }\n  if (playgroundAlways === false) {\n    strapi.log.warn(\n      'graphql config playgroundAlways:false has no effect, please use landingPage:false to disable Graphql Playground in all environments'\n    );\n  }\n\n  if (playgroundAlways || configLandingPage === true) {\n    return localLanding();\n  }\n\n  // if landing page has been disabled, use production\n  if (configLandingPage === false) {\n    return prodLanding();\n  }\n\n  // If user did not define any settings, use our defaults\n  if (configLandingPage === undefined) {\n    return isProduction ? prodLanding() : localLanding();\n  }\n\n  // if user provided a landing page function, return that\n  if (isFunction(configLandingPage)) {\n    return userLanding(configLandingPage);\n  }\n\n  // If no other setting could be found, default to production settings\n  strapi.log.warn(\n    'Your Graphql landing page has been disabled because there is a problem with your Graphql settings'\n  );\n  return prodLanding();\n};\n\nexport async function bootstrap({ strapi }: { strapi: Core.Strapi }) {\n  // Generate the GraphQL schema for the content API\n  const schema = strapi.plugin('graphql').service('content-api').buildSchema();\n\n  if (isEmpty(schema)) {\n    strapi.log.warn('The GraphQL schema has not been generated because it is empty');\n\n    return;\n  }\n\n  const { config } = strapi.plugin('graphql');\n\n  const path: string = config('endpoint');\n\n  const landingPage = determineLandingPage(strapi);\n  /**\n   * We need the arguments passed to the root query to be available in the association resolver\n   * so we can forward those arguments along to any relations.\n   *\n   * In order to do that we are currently storing the arguments in context.\n   * There is likely a better solution, but for now this is the simplest fix we could find.\n   *\n   * @see https://github.com/strapi/strapi/issues/23524\n   */\n  const pluginAddRootQueryArgs: ApolloServerPlugin<StrapiGraphQLContext> = {\n    async requestDidStart() {\n      return {\n        async executionDidStart() {\n          return {\n            willResolveField({ source, args, contextValue, info }) {\n              if (!source && info.operation.operation === 'query') {\n                // Key args per root field (alias)\n                if (!contextValue.rootQueryArgsByPath) {\n                  contextValue.rootQueryArgsByPath = new Map();\n                }\n                contextValue.rootQueryArgsByPath.set(info.path.key, {\n                  ...args,\n                  _originField: info.fieldName,\n                });\n              }\n            },\n          };\n        },\n      };\n    },\n  };\n\n  type CustomOptions = {\n    cors?: boolean | Options;\n    uploads: boolean;\n    bodyParserConfig: boolean;\n  };\n\n  const defaultServerConfig: ApolloServerOptions<StrapiGraphQLContext> & CustomOptions = {\n    // Schema\n    schema,\n\n    // Validation\n    validationRules: [depthLimit(config('depthLimit') as number) as any],\n\n    // Errors\n    formatError: formatGraphqlError,\n\n    // Misc\n    cors: undefined,\n    uploads: false,\n    bodyParserConfig: true,\n    // send 400 http status instead of 200 for input validation errors\n    status400ForVariableCoercionErrors: true,\n    plugins: [landingPage, pluginAddRootQueryArgs],\n\n    cache: 'bounded' as const,\n  };\n\n  const serverConfig = merge(\n    defaultServerConfig,\n    config('apolloServer')\n  ) as ApolloServerOptions<StrapiGraphQLContext> & CustomOptions;\n\n  // Create a new Apollo server\n  const server = new ApolloServer(serverConfig);\n\n  try {\n    // server.start() must be called before using server.applyMiddleware()\n    await server.start();\n  } catch (error) {\n    if (error instanceof Error) {\n      strapi.log.error('Failed to start the Apollo server', error.message);\n    }\n\n    throw error;\n  }\n\n  // Create the route handlers for Strapi\n  const handler: Core.MiddlewareHandler[] = [];\n\n  // add cors middleware\n  if (serverConfig.cors === false) {\n    // Explicitly disabled - don't add middleware\n  } else if (serverConfig.cors === undefined || serverConfig.cors === true) {\n    // enable with defaults (backwards compatible)\n    handler.push(cors());\n  } else {\n    // Custom options object\n    handler.push(cors(serverConfig.cors));\n  }\n\n  // add koa bodyparser middleware\n  if (isObject(serverConfig.bodyParserConfig)) {\n    handler.push(bodyParser(serverConfig.bodyParserConfig));\n  } else if (serverConfig.bodyParserConfig) {\n    handler.push(bodyParser());\n  } else {\n    strapi.log.debug('Body parser has been disabled for Apollo server');\n  }\n\n  // add the Strapi auth middleware\n  handler.push((ctx, next) => {\n    ctx.state.route = {\n      info: {\n        // Indicate it's a content API route\n        type: 'content-api',\n      },\n    };\n\n    const isPlaygroundRequest =\n      ctx.request.method === 'GET' &&\n      ctx.request.url === path && // Matches the GraphQL endpoint\n      strapi.plugin('graphql').service('utils').playground.isEnabled() && // Only allow if the Playground is enabled\n      ctx.request.header.accept?.includes('text/html'); // Specific to Playground UI loading\n\n    // Skip authentication for the GraphQL Playground UI\n    if (isPlaygroundRequest) {\n      return next();\n    }\n\n    return strapi.auth.authenticate(ctx, next);\n  });\n\n  // add the graphql server for koa\n  handler.push(\n    koaMiddleware<DefaultStateExtends, DefaultContextExtends>(server, {\n      // Initialize loaders for this request.\n      context: async ({ ctx }) => ({\n        state: ctx.state,\n        koaContext: ctx,\n      }),\n    })\n  );\n\n  // now that handlers are set up, add the graphql route to our apollo server\n  strapi.server.routes([\n    {\n      method: 'ALL',\n      path,\n      handler,\n      config: {\n        auth: false,\n      },\n    },\n  ]);\n\n  // Register destroy behavior\n  // We're doing it here instead of exposing a destroy method to the strapi-server.js\n  // file since we need to have access to the ApolloServer instance\n  strapi.plugin('graphql').destroy = async () => {\n    await server.stop();\n  };\n}\n"],"names":["merge","mergeWith","a","b","isArray","concat","determineLandingPage","strapi","config","plugin","utils","service","configLandingPage","isProduction","process","env","NODE_ENV","localLanding","log","debug","playground","setEnabled","ApolloServerPluginLandingPageLocalDefault","prodLanding","ApolloServerPluginLandingPageProductionDefault","userLanding","userFunction","result","playgroundAlways","undefined","warn","isFunction","bootstrap","schema","buildSchema","isEmpty","path","landingPage","pluginAddRootQueryArgs","requestDidStart","executionDidStart","willResolveField","source","args","contextValue","info","operation","rootQueryArgsByPath","Map","set","key","_originField","fieldName","defaultServerConfig","validationRules","depthLimit","formatError","formatGraphqlError","cors","uploads","bodyParserConfig","status400ForVariableCoercionErrors","plugins","cache","serverConfig","server","ApolloServer","start","error","Error","message","handler","push","isObject","bodyParser","ctx","next","state","route","type","isPlaygroundRequest","request","method","url","isEnabled","header","accept","includes","auth","authenticate","koaMiddleware","context","koaContext","routes","destroy","stop"],"mappings":";;;;;;;;;;;;;;;;;AAiBA,MAAMA,KAAAA,GAAQC,YAAAA,CAAU,CAACC,CAAAA,EAAGC,CAAAA,GAAAA;IAC1B,IAAIC,UAAAA,CAAQF,CAAAA,CAAAA,IAAME,UAAAA,CAAQD,CAAAA,CAAAA,EAAI;QAC5B,OAAOD,CAAAA,CAAEG,MAAM,CAACF,CAAAA,CAAAA;AAClB,IAAA;AACF,CAAA,CAAA;AAMO,MAAMG,uBAAuB,CAClCC,MAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEC,MAAM,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA;AACjC,IAAA,MAAMC,QAAQH,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWE,OAAO,CAAC,OAAA,CAAA;AAE/C;;;;;;;SAQA,MAAMC,oBAAoBJ,MAAAA,CAAO,aAAA,CAAA;AAEjC,IAAA,MAAMK,YAAAA,GAAeC,OAAAA,CAAQC,GAAG,CAACC,QAAQ,KAAK,YAAA;AAE9C,IAAA,MAAMC,YAAAA,GAAe,IAAA;QACnBV,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,4BAAA,CAAA;QACjBT,KAAAA,CAAMU,UAAU,CAACC,UAAU,CAAC,IAAA,CAAA;QAC5B,OAAOC,kDAAAA,EAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMC,WAAAA,GAAc,IAAA;QAClBhB,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,iCAAA,CAAA;QACjBT,KAAAA,CAAMU,UAAU,CAACC,UAAU,CAAC,KAAA,CAAA;QAC5B,OAAOG,uDAAAA,EAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMC,cAAc,CAACC,YAAAA,GAAAA;QACnBnB,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,oDAAA,CAAA;AACjB,QAAA,MAAMQ,SAASD,YAAAA,CAAanB,MAAAA,CAAAA;AAC5B,QAAA,IAAIoB,WAAW,IAAA,EAAM;YACnB,OAAOV,YAAAA,EAAAA;AACT,QAAA;AACA,QAAA,IAAIU,WAAW,KAAA,EAAO;YACpB,OAAOJ,WAAAA,EAAAA;AACT,QAAA;QACAhB,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,mCAAA,CAAA;QACjB,OAAOQ,MAAAA;AACT,IAAA,CAAA;;AAGA,IAAA,MAAMC,mBAAmBpB,MAAAA,CAAO,kBAAA,CAAA;AAChC,IAAA,IAAIoB,qBAAqBC,SAAAA,EAAW;QAClCtB,MAAAA,CAAOW,GAAG,CAACY,IAAI,CACb,uHAAA,CAAA;AAEJ,IAAA;AACA,IAAA,IAAIF,qBAAqB,KAAA,EAAO;QAC9BrB,MAAAA,CAAOW,GAAG,CAACY,IAAI,CACb,qIAAA,CAAA;AAEJ,IAAA;IAEA,IAAIF,gBAAAA,IAAoBhB,sBAAsB,IAAA,EAAM;QAClD,OAAOK,YAAAA,EAAAA;AACT,IAAA;;AAGA,IAAA,IAAIL,sBAAsB,KAAA,EAAO;QAC/B,OAAOW,WAAAA,EAAAA;AACT,IAAA;;AAGA,IAAA,IAAIX,sBAAsBiB,SAAAA,EAAW;AACnC,QAAA,OAAOhB,eAAeU,WAAAA,EAAAA,GAAgBN,YAAAA,EAAAA;AACxC,IAAA;;AAGA,IAAA,IAAIc,cAAWnB,iBAAAA,CAAAA,EAAoB;AACjC,QAAA,OAAOa,WAAAA,CAAYb,iBAAAA,CAAAA;AACrB,IAAA;;IAGAL,MAAAA,CAAOW,GAAG,CAACY,IAAI,CACb,mGAAA,CAAA;IAEF,OAAOP,WAAAA,EAAAA;AACT;AAEO,eAAeS,SAAAA,CAAU,EAAEzB,MAAM,EAA2B,EAAA;;IAEjE,MAAM0B,MAAAA,GAAS1B,OAAOE,MAAM,CAAC,WAAWE,OAAO,CAAC,eAAeuB,WAAW,EAAA;AAE1E,IAAA,IAAIC,WAAQF,MAAAA,CAAAA,EAAS;QACnB1B,MAAAA,CAAOW,GAAG,CAACY,IAAI,CAAC,+DAAA,CAAA;AAEhB,QAAA;AACF,IAAA;AAEA,IAAA,MAAM,EAAEtB,MAAM,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA;AAEjC,IAAA,MAAM2B,OAAe5B,MAAAA,CAAO,UAAA,CAAA;AAE5B,IAAA,MAAM6B,cAAc/B,oBAAAA,CAAqBC,MAAAA,CAAAA;AACzC;;;;;;;;AAQC,MACD,MAAM+B,sBAAAA,GAAmE;QACvE,MAAMC,eAAAA,CAAAA,GAAAA;YACJ,OAAO;gBACL,MAAMC,iBAAAA,CAAAA,GAAAA;oBACJ,OAAO;wBACLC,gBAAAA,CAAAA,CAAiB,EAAEC,MAAM,EAAEC,IAAI,EAAEC,YAAY,EAAEC,IAAI,EAAE,EAAA;AACnD,4BAAA,IAAI,CAACH,MAAAA,IAAUG,IAAAA,CAAKC,SAAS,CAACA,SAAS,KAAK,OAAA,EAAS;;gCAEnD,IAAI,CAACF,YAAAA,CAAaG,mBAAmB,EAAE;oCACrCH,YAAAA,CAAaG,mBAAmB,GAAG,IAAIC,GAAAA,EAAAA;AACzC,gCAAA;gCACAJ,YAAAA,CAAaG,mBAAmB,CAACE,GAAG,CAACJ,KAAKT,IAAI,CAACc,GAAG,EAAE;AAClD,oCAAA,GAAGP,IAAI;AACPQ,oCAAAA,YAAAA,EAAcN,KAAKO;AACrB,iCAAA,CAAA;AACF,4BAAA;AACF,wBAAA;AACF,qBAAA;AACF,gBAAA;AACF,aAAA;AACF,QAAA;AACF,KAAA;AAQA,IAAA,MAAMC,mBAAAA,GAAiF;;AAErFpB,QAAAA,MAAAA;;QAGAqB,eAAAA,EAAiB;AAACC,YAAAA,2BAAAA,CAAW/C,MAAAA,CAAO,YAAA,CAAA;AAAgC,SAAA;;QAGpEgD,WAAAA,EAAaC,qCAAAA;;QAGbC,IAAAA,EAAM7B,SAAAA;QACN8B,OAAAA,EAAS,KAAA;QACTC,gBAAAA,EAAkB,IAAA;;QAElBC,kCAAAA,EAAoC,IAAA;QACpCC,OAAAA,EAAS;AAACzB,YAAAA,WAAAA;AAAaC,YAAAA;AAAuB,SAAA;QAE9CyB,KAAAA,EAAO;AACT,KAAA;IAEA,MAAMC,YAAAA,GAAehE,KAAAA,CACnBqD,mBAAAA,EACA7C,MAAAA,CAAO,cAAA,CAAA,CAAA;;IAIT,MAAMyD,QAAAA,GAAS,IAAIC,mBAAAA,CAAaF,YAAAA,CAAAA;IAEhC,IAAI;;AAEF,QAAA,MAAMC,SAAOE,KAAK,EAAA;AACpB,IAAA,CAAA,CAAE,OAAOC,KAAAA,EAAO;AACd,QAAA,IAAIA,iBAAiBC,KAAAA,EAAO;AAC1B9D,YAAAA,MAAAA,CAAOW,GAAG,CAACkD,KAAK,CAAC,mCAAA,EAAqCA,MAAME,OAAO,CAAA;AACrE,QAAA;QAEA,MAAMF,KAAAA;AACR,IAAA;;AAGA,IAAA,MAAMG,UAAoC,EAAE;;IAG5C,IAAIP,YAAAA,CAAaN,IAAI,KAAK,KAAA,EAAO,CAEjC,MAAO,IAAIM,aAAaN,IAAI,KAAK7B,aAAamC,YAAAA,CAAaN,IAAI,KAAK,IAAA,EAAM;;AAExEa,QAAAA,OAAAA,CAAQC,IAAI,CAACd,qBAAAA,EAAAA,CAAAA;IACf,CAAA,MAAO;;AAELa,QAAAA,OAAAA,CAAQC,IAAI,CAACd,qBAAAA,CAAKM,YAAAA,CAAaN,IAAI,CAAA,CAAA;AACrC,IAAA;;IAGA,IAAIe,WAAAA,CAAST,YAAAA,CAAaJ,gBAAgB,CAAA,EAAG;AAC3CW,QAAAA,OAAAA,CAAQC,IAAI,CAACE,2BAAAA,CAAWV,YAAAA,CAAaJ,gBAAgB,CAAA,CAAA;IACvD,CAAA,MAAO,IAAII,YAAAA,CAAaJ,gBAAgB,EAAE;AACxCW,QAAAA,OAAAA,CAAQC,IAAI,CAACE,2BAAAA,EAAAA,CAAAA;IACf,CAAA,MAAO;QACLnE,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,iDAAA,CAAA;AACnB,IAAA;;IAGAoD,OAAAA,CAAQC,IAAI,CAAC,CAACG,GAAAA,EAAKC,IAAAA,GAAAA;QACjBD,GAAAA,CAAIE,KAAK,CAACC,KAAK,GAAG;YAChBjC,IAAAA,EAAM;;gBAEJkC,IAAAA,EAAM;AACR;AACF,SAAA;AAEA,QAAA,MAAMC,mBAAAA,GACJL,GAAAA,CAAIM,OAAO,CAACC,MAAM,KAAK,KAAA,IACvBP,GAAAA,CAAIM,OAAO,CAACE,GAAG,KAAK/C;QACpB7B,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWE,OAAO,CAAC,SAASS,UAAU,CAACgE,SAAS,EAAA;QAC9DT,GAAAA,CAAIM,OAAO,CAACI,MAAM,CAACC,MAAM,EAAEC,QAAAA,CAAS;;AAGtC,QAAA,IAAIP,mBAAAA,EAAqB;YACvB,OAAOJ,IAAAA,EAAAA;AACT,QAAA;AAEA,QAAA,OAAOrE,MAAAA,CAAOiF,IAAI,CAACC,YAAY,CAACd,GAAAA,EAAKC,IAAAA,CAAAA;AACvC,IAAA,CAAA,CAAA;;IAGAL,OAAAA,CAAQC,IAAI,CACVkB,iBAAAA,CAA0DzB,QAAAA,EAAQ;;AAEhE0B,QAAAA,OAAAA,EAAS,OAAO,EAAEhB,GAAG,EAAE,IAAM;AAC3BE,gBAAAA,KAAAA,EAAOF,IAAIE,KAAK;gBAChBe,UAAAA,EAAYjB;aACd;AACF,KAAA,CAAA,CAAA;;IAIFpE,MAAAA,CAAO0D,MAAM,CAAC4B,MAAM,CAAC;AACnB,QAAA;YACEX,MAAAA,EAAQ,KAAA;AACR9C,YAAAA,IAAAA;AACAmC,YAAAA,OAAAA;YACA/D,MAAAA,EAAQ;gBACNgF,IAAAA,EAAM;AACR;AACF;AACD,KAAA,CAAA;;;;AAKDjF,IAAAA,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWqF,OAAO,GAAG,UAAA;AACjC,QAAA,MAAM7B,SAAO8B,IAAI,EAAA;AACnB,IAAA,CAAA;AACF;;;;;"}
+{"version":3,"file":"bootstrap.js","sources":["../../server/src/bootstrap.ts"],"sourcesContent":["import { mergeWith, isEmpty, isObject } from 'lodash';\nimport { ApolloServer, type ApolloServerPlugin, type ApolloServerOptions } from '@apollo/server';\nimport {\n  ApolloServerPluginLandingPageLocalDefault,\n  ApolloServerPluginLandingPageProductionDefault,\n} from '@apollo/server/plugin/landingPage/default';\nimport { koaMiddleware } from '@as-integrations/koa';\nimport depthLimit from 'graphql-depth-limit';\nimport bodyParser from 'koa-bodyparser';\nimport cors from '@koa/cors';\n\nimport type { Core } from '@strapi/types';\nimport type { Options } from '@koa/cors';\nimport type { BaseContext, DefaultContextExtends, DefaultStateExtends } from 'koa';\n\nimport { formatGraphqlError } from './format-graphql-error';\n\ntype StrapiGraphQLContext = BaseContext & {\n  rootQueryArgsByPath?: Map<string | number, Record<string, unknown>>;\n};\n\ntype OperationLimitConfig = {\n  depthLimit?: unknown;\n  maxLimit?: unknown;\n};\n\nexport const getOperationLimitsWarning = ({\n  depthLimit: configuredDepthLimit,\n  maxLimit,\n}: OperationLimitConfig): string | undefined => {\n  const unboundedOrInvalidKeys: string[] = [];\n\n  if (\n    typeof configuredDepthLimit !== 'number' ||\n    !Number.isFinite(configuredDepthLimit) ||\n    configuredDepthLimit <= 0\n  ) {\n    unboundedOrInvalidKeys.push('depthLimit');\n  }\n\n  if (typeof maxLimit !== 'number' || !Number.isFinite(maxLimit) || maxLimit <= 0) {\n    unboundedOrInvalidKeys.push('maxLimit');\n  }\n\n  if (unboundedOrInvalidKeys.length === 0) {\n    return undefined;\n  }\n\n  return `Built-in GraphQL operation limits are unbounded or invalid for: ${unboundedOrInvalidKeys.join(', ')}. Configure these limits (for example: defaultLimit: 25, maxLimit: 100, depthLimit: 10). Custom Apollo validation rules may independently enforce limits. See https://docs.strapi.io/cms/configurations/plugins.`;\n};\n\nexport const determineLandingPage = (\n  strapi: Core.Strapi\n): ApolloServerPlugin<StrapiGraphQLContext> => {\n  const { config } = strapi.plugin('graphql');\n  const utils = strapi.plugin('graphql').service('utils');\n\n  /**\n   * configLanding page may be one of the following:\n   *\n   * - true: always use \"playground\" even in production\n   * - false: never show \"playground\" even in non-production\n   * - undefined: default Apollo behavior (hide playground on production)\n   * - a function that returns an Apollo plugin that implements renderLandingPage\n   ** */\n  const configLandingPage = config<\n    boolean | ((strapi?: Core.Strapi) => ApolloServerPlugin | boolean)\n  >('landingPage');\n\n  const isProduction = process.env.NODE_ENV === 'production';\n\n  const localLanding = () => {\n    strapi.log.debug('Apollo landing page: local');\n    utils.playground.setEnabled(true);\n    return ApolloServerPluginLandingPageLocalDefault();\n  };\n\n  const prodLanding = () => {\n    strapi.log.debug('Apollo landing page: production');\n    utils.playground.setEnabled(false);\n    return ApolloServerPluginLandingPageProductionDefault();\n  };\n\n  const userLanding = (userFunction: (strapi?: Core.Strapi) => ApolloServerPlugin | boolean) => {\n    strapi.log.debug('Apollo landing page: from user-defined function...');\n    const result = userFunction(strapi);\n    if (result === true) {\n      return localLanding();\n    }\n    if (result === false) {\n      return prodLanding();\n    }\n    strapi.log.debug('Apollo landing page: user-defined');\n    return result;\n  };\n\n  // DEPRECATED, remove in Strapi v6\n  const playgroundAlways = config('playgroundAlways');\n  if (playgroundAlways !== undefined) {\n    strapi.log.warn(\n      'The graphql config playgroundAlways is deprecated. This will be removed in Strapi 6. Please use landingPage instead. '\n    );\n  }\n  if (playgroundAlways === false) {\n    strapi.log.warn(\n      'graphql config playgroundAlways:false has no effect, please use landingPage:false to disable Graphql Playground in all environments'\n    );\n  }\n\n  if (playgroundAlways || configLandingPage === true) {\n    return localLanding();\n  }\n\n  // if landing page has been disabled, use production\n  if (configLandingPage === false) {\n    return prodLanding();\n  }\n\n  // If user did not define any settings, use our defaults\n  if (configLandingPage === undefined) {\n    return isProduction ? prodLanding() : localLanding();\n  }\n\n  // if user provided a landing page function, return that\n  if (typeof configLandingPage === 'function') {\n    return userLanding(configLandingPage);\n  }\n\n  // If no other setting could be found, default to production settings\n  strapi.log.warn(\n    'Your Graphql landing page has been disabled because there is a problem with your Graphql settings'\n  );\n  return prodLanding();\n};\n\nexport async function bootstrap({ strapi }: { strapi: Core.Strapi }) {\n  // Generate the GraphQL schema for the content API\n  const schema = strapi.plugin('graphql').service('content-api').buildSchema();\n\n  if (isEmpty(schema)) {\n    strapi.log.warn('The GraphQL schema has not been generated because it is empty');\n\n    return;\n  }\n\n  const { config } = strapi.plugin('graphql');\n\n  const path: string = config('endpoint');\n  const configuredDepthLimit = config('depthLimit');\n  const maxLimit = config('maxLimit');\n  const operationLimitsWarning = getOperationLimitsWarning({\n    depthLimit: configuredDepthLimit,\n    maxLimit,\n  });\n\n  if (operationLimitsWarning) {\n    strapi.log.warn(operationLimitsWarning);\n  }\n\n  const landingPage = determineLandingPage(strapi);\n  /**\n   * We need the arguments passed to the root query to be available in the association resolver\n   * so we can forward those arguments along to any relations.\n   *\n   * In order to do that we are currently storing the arguments in context.\n   * There is likely a better solution, but for now this is the simplest fix we could find.\n   *\n   * @see https://github.com/strapi/strapi/issues/23524\n   */\n  const pluginAddRootQueryArgs: ApolloServerPlugin<StrapiGraphQLContext> = {\n    async requestDidStart() {\n      return {\n        async executionDidStart() {\n          return {\n            willResolveField({ source, args, contextValue, info }) {\n              if (!source && info.operation.operation === 'query') {\n                // Key args per root field (alias)\n                if (!contextValue.rootQueryArgsByPath) {\n                  contextValue.rootQueryArgsByPath = new Map();\n                }\n                contextValue.rootQueryArgsByPath.set(info.path.key, {\n                  ...args,\n                  _originField: info.fieldName,\n                });\n              }\n            },\n          };\n        },\n      };\n    },\n  };\n\n  type CustomOptions = {\n    cors?: boolean | Options;\n    uploads: boolean;\n    bodyParserConfig: boolean;\n  };\n\n  const defaultServerConfig: ApolloServerOptions<StrapiGraphQLContext> & CustomOptions = {\n    // Schema\n    schema,\n\n    // Validation\n    // Keep v5 compatibility: depthLimit is passed through unchanged, so an unset or invalid value\n    // does not become an enforced finite limit during an upgrade.\n    validationRules: [depthLimit(configuredDepthLimit as number) as any],\n\n    // Errors\n    formatError: formatGraphqlError,\n\n    // Misc\n    cors: undefined,\n    uploads: false,\n    bodyParserConfig: true,\n    // send 400 http status instead of 200 for input validation errors\n    status400ForVariableCoercionErrors: true,\n    plugins: [landingPage, pluginAddRootQueryArgs],\n\n    cache: 'bounded' as const,\n  };\n\n  const serverConfig = mergeWith(\n    {},\n    defaultServerConfig,\n    config('apolloServer'),\n    (a: unknown, b: unknown) => {\n      if (Array.isArray(a) && Array.isArray(b)) {\n        return a.concat(b);\n      }\n      return undefined;\n    }\n  ) as ApolloServerOptions<StrapiGraphQLContext> & CustomOptions;\n\n  // Create a new Apollo server\n  const server = new ApolloServer(serverConfig);\n\n  try {\n    // server.start() must be called before using server.applyMiddleware()\n    await server.start();\n  } catch (error) {\n    if (error instanceof Error) {\n      strapi.log.error('Failed to start the Apollo server', error.message);\n    }\n\n    throw error;\n  }\n\n  // Create the route handlers for Strapi\n  const handler: Core.MiddlewareHandler[] = [];\n\n  // add cors middleware\n  if (serverConfig.cors === false) {\n    // Explicitly disabled - don't add middleware\n  } else if (serverConfig.cors === undefined || serverConfig.cors === true) {\n    // enable with defaults (backwards compatible)\n    handler.push(cors());\n  } else {\n    // Custom options object\n    handler.push(cors(serverConfig.cors));\n  }\n\n  // add koa bodyparser middleware\n  if (isObject(serverConfig.bodyParserConfig)) {\n    handler.push(bodyParser(serverConfig.bodyParserConfig));\n  } else if (serverConfig.bodyParserConfig) {\n    handler.push(bodyParser());\n  } else {\n    strapi.log.debug('Body parser has been disabled for Apollo server');\n  }\n\n  // add the Strapi auth middleware\n  handler.push((ctx, next) => {\n    ctx.state.route = {\n      info: {\n        // Indicate it's a content API route\n        type: 'content-api',\n      },\n    };\n\n    const isPlaygroundRequest =\n      ctx.request.method === 'GET' &&\n      ctx.request.url === path && // Matches the GraphQL endpoint\n      strapi.plugin('graphql').service('utils').playground.isEnabled() && // Only allow if the Playground is enabled\n      ctx.request.header.accept?.includes('text/html'); // Specific to Playground UI loading\n\n    // Skip authentication for the GraphQL Playground UI\n    if (isPlaygroundRequest) {\n      return next();\n    }\n\n    return strapi.auth.authenticate(ctx, next);\n  });\n\n  // add the graphql server for koa\n  handler.push(\n    koaMiddleware<DefaultStateExtends, DefaultContextExtends>(server, {\n      // Initialize loaders for this request.\n      context: async ({ ctx }) => ({\n        state: ctx.state,\n        koaContext: ctx,\n      }),\n    })\n  );\n\n  // now that handlers are set up, add the graphql route to our apollo server\n  strapi.server.routes([\n    {\n      method: 'ALL',\n      path,\n      handler,\n      config: {\n        auth: false,\n      },\n    },\n  ]);\n\n  // Register destroy behavior\n  // We're doing it here instead of exposing a destroy method to the strapi-server.js\n  // file since we need to have access to the ApolloServer instance\n  strapi.plugin('graphql').destroy = async () => {\n    await server.stop();\n  };\n}\n"],"names":["getOperationLimitsWarning","depthLimit","configuredDepthLimit","maxLimit","unboundedOrInvalidKeys","Number","isFinite","push","length","undefined","join","determineLandingPage","strapi","config","plugin","utils","service","configLandingPage","isProduction","process","env","NODE_ENV","localLanding","log","debug","playground","setEnabled","ApolloServerPluginLandingPageLocalDefault","prodLanding","ApolloServerPluginLandingPageProductionDefault","userLanding","userFunction","result","playgroundAlways","warn","bootstrap","schema","buildSchema","isEmpty","path","operationLimitsWarning","landingPage","pluginAddRootQueryArgs","requestDidStart","executionDidStart","willResolveField","source","args","contextValue","info","operation","rootQueryArgsByPath","Map","set","key","_originField","fieldName","defaultServerConfig","validationRules","formatError","formatGraphqlError","cors","uploads","bodyParserConfig","status400ForVariableCoercionErrors","plugins","cache","serverConfig","mergeWith","a","b","Array","isArray","concat","server","ApolloServer","start","error","Error","message","handler","isObject","bodyParser","ctx","next","state","route","type","isPlaygroundRequest","request","method","url","isEnabled","header","accept","includes","auth","authenticate","koaMiddleware","context","koaContext","routes","destroy","stop"],"mappings":";;;;;;;;;;;;;;;;;AA0BO,MAAMA,4BAA4B,CAAC,EACxCC,YAAYC,oBAAoB,EAChCC,QAAQ,EACa,GAAA;AACrB,IAAA,MAAMC,yBAAmC,EAAE;IAE3C,IACE,OAAOF,yBAAyB,QAAA,IAChC,CAACG,OAAOC,QAAQ,CAACJ,oBAAAA,CAAAA,IACjBA,oBAAAA,IAAwB,CAAA,EACxB;AACAE,QAAAA,sBAAAA,CAAuBG,IAAI,CAAC,YAAA,CAAA;AAC9B,IAAA;IAEA,IAAI,OAAOJ,aAAa,QAAA,IAAY,CAACE,OAAOC,QAAQ,CAACH,QAAAA,CAAAA,IAAaA,QAAAA,IAAY,CAAA,EAAG;AAC/EC,QAAAA,sBAAAA,CAAuBG,IAAI,CAAC,UAAA,CAAA;AAC9B,IAAA;IAEA,IAAIH,sBAAAA,CAAuBI,MAAM,KAAK,CAAA,EAAG;QACvC,OAAOC,SAAAA;AACT,IAAA;IAEA,OAAO,CAAC,gEAAgE,EAAEL,sBAAAA,CAAuBM,IAAI,CAAC,IAAA,CAAA,CAAM,gNAAgN,CAAC;AAC/T;AAEO,MAAMC,uBAAuB,CAClCC,MAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEC,MAAM,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA;AACjC,IAAA,MAAMC,QAAQH,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWE,OAAO,CAAC,OAAA,CAAA;AAE/C;;;;;;;SAQA,MAAMC,oBAAoBJ,MAAAA,CAExB,aAAA,CAAA;AAEF,IAAA,MAAMK,YAAAA,GAAeC,OAAAA,CAAQC,GAAG,CAACC,QAAQ,KAAK,YAAA;AAE9C,IAAA,MAAMC,YAAAA,GAAe,IAAA;QACnBV,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,4BAAA,CAAA;QACjBT,KAAAA,CAAMU,UAAU,CAACC,UAAU,CAAC,IAAA,CAAA;QAC5B,OAAOC,kDAAAA,EAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMC,WAAAA,GAAc,IAAA;QAClBhB,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,iCAAA,CAAA;QACjBT,KAAAA,CAAMU,UAAU,CAACC,UAAU,CAAC,KAAA,CAAA;QAC5B,OAAOG,uDAAAA,EAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMC,cAAc,CAACC,YAAAA,GAAAA;QACnBnB,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,oDAAA,CAAA;AACjB,QAAA,MAAMQ,SAASD,YAAAA,CAAanB,MAAAA,CAAAA;AAC5B,QAAA,IAAIoB,WAAW,IAAA,EAAM;YACnB,OAAOV,YAAAA,EAAAA;AACT,QAAA;AACA,QAAA,IAAIU,WAAW,KAAA,EAAO;YACpB,OAAOJ,WAAAA,EAAAA;AACT,QAAA;QACAhB,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,mCAAA,CAAA;QACjB,OAAOQ,MAAAA;AACT,IAAA,CAAA;;AAGA,IAAA,MAAMC,mBAAmBpB,MAAAA,CAAO,kBAAA,CAAA;AAChC,IAAA,IAAIoB,qBAAqBxB,SAAAA,EAAW;QAClCG,MAAAA,CAAOW,GAAG,CAACW,IAAI,CACb,uHAAA,CAAA;AAEJ,IAAA;AACA,IAAA,IAAID,qBAAqB,KAAA,EAAO;QAC9BrB,MAAAA,CAAOW,GAAG,CAACW,IAAI,CACb,qIAAA,CAAA;AAEJ,IAAA;IAEA,IAAID,gBAAAA,IAAoBhB,sBAAsB,IAAA,EAAM;QAClD,OAAOK,YAAAA,EAAAA;AACT,IAAA;;AAGA,IAAA,IAAIL,sBAAsB,KAAA,EAAO;QAC/B,OAAOW,WAAAA,EAAAA;AACT,IAAA;;AAGA,IAAA,IAAIX,sBAAsBR,SAAAA,EAAW;AACnC,QAAA,OAAOS,eAAeU,WAAAA,EAAAA,GAAgBN,YAAAA,EAAAA;AACxC,IAAA;;IAGA,IAAI,OAAOL,sBAAsB,UAAA,EAAY;AAC3C,QAAA,OAAOa,WAAAA,CAAYb,iBAAAA,CAAAA;AACrB,IAAA;;IAGAL,MAAAA,CAAOW,GAAG,CAACW,IAAI,CACb,mGAAA,CAAA;IAEF,OAAON,WAAAA,EAAAA;AACT;AAEO,eAAeO,SAAAA,CAAU,EAAEvB,MAAM,EAA2B,EAAA;;IAEjE,MAAMwB,MAAAA,GAASxB,OAAOE,MAAM,CAAC,WAAWE,OAAO,CAAC,eAAeqB,WAAW,EAAA;AAE1E,IAAA,IAAIC,eAAQF,MAAAA,CAAAA,EAAS;QACnBxB,MAAAA,CAAOW,GAAG,CAACW,IAAI,CAAC,+DAAA,CAAA;AAEhB,QAAA;AACF,IAAA;AAEA,IAAA,MAAM,EAAErB,MAAM,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA;AAEjC,IAAA,MAAMyB,OAAe1B,MAAAA,CAAO,UAAA,CAAA;AAC5B,IAAA,MAAMX,uBAAuBW,MAAAA,CAAO,YAAA,CAAA;AACpC,IAAA,MAAMV,WAAWU,MAAAA,CAAO,UAAA,CAAA;AACxB,IAAA,MAAM2B,yBAAyBxC,yBAAAA,CAA0B;QACvDC,UAAAA,EAAYC,oBAAAA;AACZC,QAAAA;AACF,KAAA,CAAA;AAEA,IAAA,IAAIqC,sBAAAA,EAAwB;QAC1B5B,MAAAA,CAAOW,GAAG,CAACW,IAAI,CAACM,sBAAAA,CAAAA;AAClB,IAAA;AAEA,IAAA,MAAMC,cAAc9B,oBAAAA,CAAqBC,MAAAA,CAAAA;AACzC;;;;;;;;AAQC,MACD,MAAM8B,sBAAAA,GAAmE;QACvE,MAAMC,eAAAA,CAAAA,GAAAA;YACJ,OAAO;gBACL,MAAMC,iBAAAA,CAAAA,GAAAA;oBACJ,OAAO;wBACLC,gBAAAA,CAAAA,CAAiB,EAAEC,MAAM,EAAEC,IAAI,EAAEC,YAAY,EAAEC,IAAI,EAAE,EAAA;AACnD,4BAAA,IAAI,CAACH,MAAAA,IAAUG,IAAAA,CAAKC,SAAS,CAACA,SAAS,KAAK,OAAA,EAAS;;gCAEnD,IAAI,CAACF,YAAAA,CAAaG,mBAAmB,EAAE;oCACrCH,YAAAA,CAAaG,mBAAmB,GAAG,IAAIC,GAAAA,EAAAA;AACzC,gCAAA;gCACAJ,YAAAA,CAAaG,mBAAmB,CAACE,GAAG,CAACJ,KAAKV,IAAI,CAACe,GAAG,EAAE;AAClD,oCAAA,GAAGP,IAAI;AACPQ,oCAAAA,YAAAA,EAAcN,KAAKO;AACrB,iCAAA,CAAA;AACF,4BAAA;AACF,wBAAA;AACF,qBAAA;AACF,gBAAA;AACF,aAAA;AACF,QAAA;AACF,KAAA;AAQA,IAAA,MAAMC,mBAAAA,GAAiF;;AAErFrB,QAAAA,MAAAA;;;;QAKAsB,eAAAA,EAAiB;YAACzD,2BAAAA,CAAWC,oBAAAA;AAAuC,SAAA;;QAGpEyD,WAAAA,EAAaC,qCAAAA;;QAGbC,IAAAA,EAAMpD,SAAAA;QACNqD,OAAAA,EAAS,KAAA;QACTC,gBAAAA,EAAkB,IAAA;;QAElBC,kCAAAA,EAAoC,IAAA;QACpCC,OAAAA,EAAS;AAACxB,YAAAA,WAAAA;AAAaC,YAAAA;AAAuB,SAAA;QAE9CwB,KAAAA,EAAO;AACT,KAAA;IAEA,MAAMC,YAAAA,GAAeC,iBACnB,EAAC,EACDX,qBACA5C,MAAAA,CAAO,cAAA,CAAA,EACP,CAACwD,CAAAA,EAAYC,CAAAA,GAAAA;AACX,QAAA,IAAIC,MAAMC,OAAO,CAACH,MAAME,KAAAA,CAAMC,OAAO,CAACF,CAAAA,CAAAA,EAAI;YACxC,OAAOD,CAAAA,CAAEI,MAAM,CAACH,CAAAA,CAAAA;AAClB,QAAA;QACA,OAAO7D,SAAAA;AACT,IAAA,CAAA,CAAA;;IAIF,MAAMiE,QAAAA,GAAS,IAAIC,mBAAAA,CAAaR,YAAAA,CAAAA;IAEhC,IAAI;;AAEF,QAAA,MAAMO,SAAOE,KAAK,EAAA;AACpB,IAAA,CAAA,CAAE,OAAOC,KAAAA,EAAO;AACd,QAAA,IAAIA,iBAAiBC,KAAAA,EAAO;AAC1BlE,YAAAA,MAAAA,CAAOW,GAAG,CAACsD,KAAK,CAAC,mCAAA,EAAqCA,MAAME,OAAO,CAAA;AACrE,QAAA;QAEA,MAAMF,KAAAA;AACR,IAAA;;AAGA,IAAA,MAAMG,UAAoC,EAAE;;IAG5C,IAAIb,YAAAA,CAAaN,IAAI,KAAK,KAAA,EAAO,CAEjC,MAAO,IAAIM,aAAaN,IAAI,KAAKpD,aAAa0D,YAAAA,CAAaN,IAAI,KAAK,IAAA,EAAM;;AAExEmB,QAAAA,OAAAA,CAAQzE,IAAI,CAACsD,qBAAAA,EAAAA,CAAAA;IACf,CAAA,MAAO;;AAELmB,QAAAA,OAAAA,CAAQzE,IAAI,CAACsD,qBAAAA,CAAKM,YAAAA,CAAaN,IAAI,CAAA,CAAA;AACrC,IAAA;;IAGA,IAAIoB,eAAAA,CAASd,YAAAA,CAAaJ,gBAAgB,CAAA,EAAG;AAC3CiB,QAAAA,OAAAA,CAAQzE,IAAI,CAAC2E,2BAAAA,CAAWf,YAAAA,CAAaJ,gBAAgB,CAAA,CAAA;IACvD,CAAA,MAAO,IAAII,YAAAA,CAAaJ,gBAAgB,EAAE;AACxCiB,QAAAA,OAAAA,CAAQzE,IAAI,CAAC2E,2BAAAA,EAAAA,CAAAA;IACf,CAAA,MAAO;QACLtE,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,iDAAA,CAAA;AACnB,IAAA;;IAGAwD,OAAAA,CAAQzE,IAAI,CAAC,CAAC4E,GAAAA,EAAKC,IAAAA,GAAAA;QACjBD,GAAAA,CAAIE,KAAK,CAACC,KAAK,GAAG;YAChBrC,IAAAA,EAAM;;gBAEJsC,IAAAA,EAAM;AACR;AACF,SAAA;AAEA,QAAA,MAAMC,mBAAAA,GACJL,GAAAA,CAAIM,OAAO,CAACC,MAAM,KAAK,KAAA,IACvBP,GAAAA,CAAIM,OAAO,CAACE,GAAG,KAAKpD;QACpB3B,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWE,OAAO,CAAC,SAASS,UAAU,CAACmE,SAAS,EAAA;QAC9DT,GAAAA,CAAIM,OAAO,CAACI,MAAM,CAACC,MAAM,EAAEC,QAAAA,CAAS;;AAGtC,QAAA,IAAIP,mBAAAA,EAAqB;YACvB,OAAOJ,IAAAA,EAAAA;AACT,QAAA;AAEA,QAAA,OAAOxE,MAAAA,CAAOoF,IAAI,CAACC,YAAY,CAACd,GAAAA,EAAKC,IAAAA,CAAAA;AACvC,IAAA,CAAA,CAAA;;IAGAJ,OAAAA,CAAQzE,IAAI,CACV2F,iBAAAA,CAA0DxB,QAAAA,EAAQ;;AAEhEyB,QAAAA,OAAAA,EAAS,OAAO,EAAEhB,GAAG,EAAE,IAAM;AAC3BE,gBAAAA,KAAAA,EAAOF,IAAIE,KAAK;gBAChBe,UAAAA,EAAYjB;aACd;AACF,KAAA,CAAA,CAAA;;IAIFvE,MAAAA,CAAO8D,MAAM,CAAC2B,MAAM,CAAC;AACnB,QAAA;YACEX,MAAAA,EAAQ,KAAA;AACRnD,YAAAA,IAAAA;AACAyC,YAAAA,OAAAA;YACAnE,MAAAA,EAAQ;gBACNmF,IAAAA,EAAM;AACR;AACF;AACD,KAAA,CAAA;;;;AAKDpF,IAAAA,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWwF,OAAO,GAAG,UAAA;AACjC,QAAA,MAAM5B,SAAO6B,IAAI,EAAA;AACnB,IAAA,CAAA;AACF;;;;;;"}

package/dist/server/bootstrap.mjs

@@ -1,4 +1,4 @@
-import { mergeWith, isArray, isEmpty, isObject, isFunction } from 'lodash/fp';
+import { isEmpty, mergeWith, isObject } from 'lodash';
 import { ApolloServer } from '@apollo/server';
 import { ApolloServerPluginLandingPageLocalDefault, ApolloServerPluginLandingPageProductionDefault } from '@apollo/server/plugin/landingPage/default';
 import { koaMiddleware } from '@as-integrations/koa';
@@ -7,11 +7,19 @@ import bodyParser from 'koa-bodyparser';
 import cors from '@koa/cors';
 import { formatGraphqlError } from './format-graphql-error.mjs';
 
-const merge = mergeWith((a, b)=>{
-    if (isArray(a) && isArray(b)) {
-        return a.concat(b);
+const getOperationLimitsWarning = ({ depthLimit: configuredDepthLimit, maxLimit })=>{
+    const unboundedOrInvalidKeys = [];
+    if (typeof configuredDepthLimit !== 'number' || !Number.isFinite(configuredDepthLimit) || configuredDepthLimit <= 0) {
+        unboundedOrInvalidKeys.push('depthLimit');
     }
-});
+    if (typeof maxLimit !== 'number' || !Number.isFinite(maxLimit) || maxLimit <= 0) {
+        unboundedOrInvalidKeys.push('maxLimit');
+    }
+    if (unboundedOrInvalidKeys.length === 0) {
+        return undefined;
+    }
+    return `Built-in GraphQL operation limits are unbounded or invalid for: ${unboundedOrInvalidKeys.join(', ')}. Configure these limits (for example: defaultLimit: 25, maxLimit: 100, depthLimit: 10). Custom Apollo validation rules may independently enforce limits. See https://docs.strapi.io/cms/configurations/plugins.`;
+};
 const determineLandingPage = (strapi)=>{
     const { config } = strapi.plugin('graphql');
     const utils = strapi.plugin('graphql').service('utils');
@@ -66,7 +74,7 @@ const determineLandingPage = (strapi)=>{
         return isProduction ? prodLanding() : localLanding();
     }
     // if user provided a landing page function, return that
-    if (isFunction(configLandingPage)) {
+    if (typeof configLandingPage === 'function') {
         return userLanding(configLandingPage);
     }
     // If no other setting could be found, default to production settings
@@ -82,6 +90,15 @@ async function bootstrap({ strapi }) {
     }
     const { config } = strapi.plugin('graphql');
     const path = config('endpoint');
+    const configuredDepthLimit = config('depthLimit');
+    const maxLimit = config('maxLimit');
+    const operationLimitsWarning = getOperationLimitsWarning({
+        depthLimit: configuredDepthLimit,
+        maxLimit
+    });
+    if (operationLimitsWarning) {
+        strapi.log.warn(operationLimitsWarning);
+    }
     const landingPage = determineLandingPage(strapi);
     /**
    * We need the arguments passed to the root query to be available in the association resolver
@@ -117,8 +134,10 @@ async function bootstrap({ strapi }) {
         // Schema
         schema,
         // Validation
+        // Keep v5 compatibility: depthLimit is passed through unchanged, so an unset or invalid value
+        // does not become an enforced finite limit during an upgrade.
         validationRules: [
-            depthLimit(config('depthLimit'))
+            depthLimit(configuredDepthLimit)
         ],
         // Errors
         formatError: formatGraphqlError,
@@ -134,7 +153,12 @@ async function bootstrap({ strapi }) {
         ],
         cache: 'bounded'
     };
-    const serverConfig = merge(defaultServerConfig, config('apolloServer'));
+    const serverConfig = mergeWith({}, defaultServerConfig, config('apolloServer'), (a, b)=>{
+        if (Array.isArray(a) && Array.isArray(b)) {
+            return a.concat(b);
+        }
+        return undefined;
+    });
     // Create a new Apollo server
     const server = new ApolloServer(serverConfig);
     try {
@@ -208,5 +232,5 @@ async function bootstrap({ strapi }) {
     };
 }
 
-export { bootstrap, determineLandingPage };
+export { bootstrap, determineLandingPage, getOperationLimitsWarning };
 //# sourceMappingURL=bootstrap.mjs.map

package/dist/server/bootstrap.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.mjs","sources":["../../server/src/bootstrap.ts"],"sourcesContent":["import { isEmpty, mergeWith, isArray, isObject, isFunction } from 'lodash/fp';\nimport { ApolloServer, type ApolloServerPlugin, type ApolloServerOptions } from '@apollo/server';\nimport {\n  ApolloServerPluginLandingPageLocalDefault,\n  ApolloServerPluginLandingPageProductionDefault,\n} from '@apollo/server/plugin/landingPage/default';\nimport { koaMiddleware } from '@as-integrations/koa';\nimport depthLimit from 'graphql-depth-limit';\nimport bodyParser from 'koa-bodyparser';\nimport cors from '@koa/cors';\n\nimport type { Core } from '@strapi/types';\nimport type { Options } from '@koa/cors';\nimport type { BaseContext, DefaultContextExtends, DefaultStateExtends } from 'koa';\n\nimport { formatGraphqlError } from './format-graphql-error';\n\nconst merge = mergeWith((a, b) => {\n  if (isArray(a) && isArray(b)) {\n    return a.concat(b);\n  }\n});\n\ntype StrapiGraphQLContext = BaseContext & {\n  rootQueryArgsByPath?: Map<string | number, Record<string, unknown>>;\n};\n\nexport const determineLandingPage = (\n  strapi: Core.Strapi\n): ApolloServerPlugin<StrapiGraphQLContext> => {\n  const { config } = strapi.plugin('graphql');\n  const utils = strapi.plugin('graphql').service('utils');\n\n  /**\n   * configLanding page may be one of the following:\n   *\n   * - true: always use \"playground\" even in production\n   * - false: never show \"playground\" even in non-production\n   * - undefined: default Apollo behavior (hide playground on production)\n   * - a function that returns an Apollo plugin that implements renderLandingPage\n   ** */\n  const configLandingPage = config('landingPage');\n\n  const isProduction = process.env.NODE_ENV === 'production';\n\n  const localLanding = () => {\n    strapi.log.debug('Apollo landing page: local');\n    utils.playground.setEnabled(true);\n    return ApolloServerPluginLandingPageLocalDefault();\n  };\n\n  const prodLanding = () => {\n    strapi.log.debug('Apollo landing page: production');\n    utils.playground.setEnabled(false);\n    return ApolloServerPluginLandingPageProductionDefault();\n  };\n\n  const userLanding = (userFunction: (strapi?: Core.Strapi) => ApolloServerPlugin | boolean) => {\n    strapi.log.debug('Apollo landing page: from user-defined function...');\n    const result = userFunction(strapi);\n    if (result === true) {\n      return localLanding();\n    }\n    if (result === false) {\n      return prodLanding();\n    }\n    strapi.log.debug('Apollo landing page: user-defined');\n    return result;\n  };\n\n  // DEPRECATED, remove in Strapi v6\n  const playgroundAlways = config('playgroundAlways');\n  if (playgroundAlways !== undefined) {\n    strapi.log.warn(\n      'The graphql config playgroundAlways is deprecated. This will be removed in Strapi 6. Please use landingPage instead. '\n    );\n  }\n  if (playgroundAlways === false) {\n    strapi.log.warn(\n      'graphql config playgroundAlways:false has no effect, please use landingPage:false to disable Graphql Playground in all environments'\n    );\n  }\n\n  if (playgroundAlways || configLandingPage === true) {\n    return localLanding();\n  }\n\n  // if landing page has been disabled, use production\n  if (configLandingPage === false) {\n    return prodLanding();\n  }\n\n  // If user did not define any settings, use our defaults\n  if (configLandingPage === undefined) {\n    return isProduction ? prodLanding() : localLanding();\n  }\n\n  // if user provided a landing page function, return that\n  if (isFunction(configLandingPage)) {\n    return userLanding(configLandingPage);\n  }\n\n  // If no other setting could be found, default to production settings\n  strapi.log.warn(\n    'Your Graphql landing page has been disabled because there is a problem with your Graphql settings'\n  );\n  return prodLanding();\n};\n\nexport async function bootstrap({ strapi }: { strapi: Core.Strapi }) {\n  // Generate the GraphQL schema for the content API\n  const schema = strapi.plugin('graphql').service('content-api').buildSchema();\n\n  if (isEmpty(schema)) {\n    strapi.log.warn('The GraphQL schema has not been generated because it is empty');\n\n    return;\n  }\n\n  const { config } = strapi.plugin('graphql');\n\n  const path: string = config('endpoint');\n\n  const landingPage = determineLandingPage(strapi);\n  /**\n   * We need the arguments passed to the root query to be available in the association resolver\n   * so we can forward those arguments along to any relations.\n   *\n   * In order to do that we are currently storing the arguments in context.\n   * There is likely a better solution, but for now this is the simplest fix we could find.\n   *\n   * @see https://github.com/strapi/strapi/issues/23524\n   */\n  const pluginAddRootQueryArgs: ApolloServerPlugin<StrapiGraphQLContext> = {\n    async requestDidStart() {\n      return {\n        async executionDidStart() {\n          return {\n            willResolveField({ source, args, contextValue, info }) {\n              if (!source && info.operation.operation === 'query') {\n                // Key args per root field (alias)\n                if (!contextValue.rootQueryArgsByPath) {\n                  contextValue.rootQueryArgsByPath = new Map();\n                }\n                contextValue.rootQueryArgsByPath.set(info.path.key, {\n                  ...args,\n                  _originField: info.fieldName,\n                });\n              }\n            },\n          };\n        },\n      };\n    },\n  };\n\n  type CustomOptions = {\n    cors?: boolean | Options;\n    uploads: boolean;\n    bodyParserConfig: boolean;\n  };\n\n  const defaultServerConfig: ApolloServerOptions<StrapiGraphQLContext> & CustomOptions = {\n    // Schema\n    schema,\n\n    // Validation\n    validationRules: [depthLimit(config('depthLimit') as number) as any],\n\n    // Errors\n    formatError: formatGraphqlError,\n\n    // Misc\n    cors: undefined,\n    uploads: false,\n    bodyParserConfig: true,\n    // send 400 http status instead of 200 for input validation errors\n    status400ForVariableCoercionErrors: true,\n    plugins: [landingPage, pluginAddRootQueryArgs],\n\n    cache: 'bounded' as const,\n  };\n\n  const serverConfig = merge(\n    defaultServerConfig,\n    config('apolloServer')\n  ) as ApolloServerOptions<StrapiGraphQLContext> & CustomOptions;\n\n  // Create a new Apollo server\n  const server = new ApolloServer(serverConfig);\n\n  try {\n    // server.start() must be called before using server.applyMiddleware()\n    await server.start();\n  } catch (error) {\n    if (error instanceof Error) {\n      strapi.log.error('Failed to start the Apollo server', error.message);\n    }\n\n    throw error;\n  }\n\n  // Create the route handlers for Strapi\n  const handler: Core.MiddlewareHandler[] = [];\n\n  // add cors middleware\n  if (serverConfig.cors === false) {\n    // Explicitly disabled - don't add middleware\n  } else if (serverConfig.cors === undefined || serverConfig.cors === true) {\n    // enable with defaults (backwards compatible)\n    handler.push(cors());\n  } else {\n    // Custom options object\n    handler.push(cors(serverConfig.cors));\n  }\n\n  // add koa bodyparser middleware\n  if (isObject(serverConfig.bodyParserConfig)) {\n    handler.push(bodyParser(serverConfig.bodyParserConfig));\n  } else if (serverConfig.bodyParserConfig) {\n    handler.push(bodyParser());\n  } else {\n    strapi.log.debug('Body parser has been disabled for Apollo server');\n  }\n\n  // add the Strapi auth middleware\n  handler.push((ctx, next) => {\n    ctx.state.route = {\n      info: {\n        // Indicate it's a content API route\n        type: 'content-api',\n      },\n    };\n\n    const isPlaygroundRequest =\n      ctx.request.method === 'GET' &&\n      ctx.request.url === path && // Matches the GraphQL endpoint\n      strapi.plugin('graphql').service('utils').playground.isEnabled() && // Only allow if the Playground is enabled\n      ctx.request.header.accept?.includes('text/html'); // Specific to Playground UI loading\n\n    // Skip authentication for the GraphQL Playground UI\n    if (isPlaygroundRequest) {\n      return next();\n    }\n\n    return strapi.auth.authenticate(ctx, next);\n  });\n\n  // add the graphql server for koa\n  handler.push(\n    koaMiddleware<DefaultStateExtends, DefaultContextExtends>(server, {\n      // Initialize loaders for this request.\n      context: async ({ ctx }) => ({\n        state: ctx.state,\n        koaContext: ctx,\n      }),\n    })\n  );\n\n  // now that handlers are set up, add the graphql route to our apollo server\n  strapi.server.routes([\n    {\n      method: 'ALL',\n      path,\n      handler,\n      config: {\n        auth: false,\n      },\n    },\n  ]);\n\n  // Register destroy behavior\n  // We're doing it here instead of exposing a destroy method to the strapi-server.js\n  // file since we need to have access to the ApolloServer instance\n  strapi.plugin('graphql').destroy = async () => {\n    await server.stop();\n  };\n}\n"],"names":["merge","mergeWith","a","b","isArray","concat","determineLandingPage","strapi","config","plugin","utils","service","configLandingPage","isProduction","process","env","NODE_ENV","localLanding","log","debug","playground","setEnabled","ApolloServerPluginLandingPageLocalDefault","prodLanding","ApolloServerPluginLandingPageProductionDefault","userLanding","userFunction","result","playgroundAlways","undefined","warn","isFunction","bootstrap","schema","buildSchema","isEmpty","path","landingPage","pluginAddRootQueryArgs","requestDidStart","executionDidStart","willResolveField","source","args","contextValue","info","operation","rootQueryArgsByPath","Map","set","key","_originField","fieldName","defaultServerConfig","validationRules","depthLimit","formatError","formatGraphqlError","cors","uploads","bodyParserConfig","status400ForVariableCoercionErrors","plugins","cache","serverConfig","server","ApolloServer","start","error","Error","message","handler","push","isObject","bodyParser","ctx","next","state","route","type","isPlaygroundRequest","request","method","url","isEnabled","header","accept","includes","auth","authenticate","koaMiddleware","context","koaContext","routes","destroy","stop"],"mappings":";;;;;;;;;AAiBA,MAAMA,KAAAA,GAAQC,SAAAA,CAAU,CAACC,CAAAA,EAAGC,CAAAA,GAAAA;IAC1B,IAAIC,OAAAA,CAAQF,CAAAA,CAAAA,IAAME,OAAAA,CAAQD,CAAAA,CAAAA,EAAI;QAC5B,OAAOD,CAAAA,CAAEG,MAAM,CAACF,CAAAA,CAAAA;AAClB,IAAA;AACF,CAAA,CAAA;AAMO,MAAMG,uBAAuB,CAClCC,MAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEC,MAAM,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA;AACjC,IAAA,MAAMC,QAAQH,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWE,OAAO,CAAC,OAAA,CAAA;AAE/C;;;;;;;SAQA,MAAMC,oBAAoBJ,MAAAA,CAAO,aAAA,CAAA;AAEjC,IAAA,MAAMK,YAAAA,GAAeC,OAAAA,CAAQC,GAAG,CAACC,QAAQ,KAAK,YAAA;AAE9C,IAAA,MAAMC,YAAAA,GAAe,IAAA;QACnBV,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,4BAAA,CAAA;QACjBT,KAAAA,CAAMU,UAAU,CAACC,UAAU,CAAC,IAAA,CAAA;QAC5B,OAAOC,yCAAAA,EAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMC,WAAAA,GAAc,IAAA;QAClBhB,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,iCAAA,CAAA;QACjBT,KAAAA,CAAMU,UAAU,CAACC,UAAU,CAAC,KAAA,CAAA;QAC5B,OAAOG,8CAAAA,EAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMC,cAAc,CAACC,YAAAA,GAAAA;QACnBnB,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,oDAAA,CAAA;AACjB,QAAA,MAAMQ,SAASD,YAAAA,CAAanB,MAAAA,CAAAA;AAC5B,QAAA,IAAIoB,WAAW,IAAA,EAAM;YACnB,OAAOV,YAAAA,EAAAA;AACT,QAAA;AACA,QAAA,IAAIU,WAAW,KAAA,EAAO;YACpB,OAAOJ,WAAAA,EAAAA;AACT,QAAA;QACAhB,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,mCAAA,CAAA;QACjB,OAAOQ,MAAAA;AACT,IAAA,CAAA;;AAGA,IAAA,MAAMC,mBAAmBpB,MAAAA,CAAO,kBAAA,CAAA;AAChC,IAAA,IAAIoB,qBAAqBC,SAAAA,EAAW;QAClCtB,MAAAA,CAAOW,GAAG,CAACY,IAAI,CACb,uHAAA,CAAA;AAEJ,IAAA;AACA,IAAA,IAAIF,qBAAqB,KAAA,EAAO;QAC9BrB,MAAAA,CAAOW,GAAG,CAACY,IAAI,CACb,qIAAA,CAAA;AAEJ,IAAA;IAEA,IAAIF,gBAAAA,IAAoBhB,sBAAsB,IAAA,EAAM;QAClD,OAAOK,YAAAA,EAAAA;AACT,IAAA;;AAGA,IAAA,IAAIL,sBAAsB,KAAA,EAAO;QAC/B,OAAOW,WAAAA,EAAAA;AACT,IAAA;;AAGA,IAAA,IAAIX,sBAAsBiB,SAAAA,EAAW;AACnC,QAAA,OAAOhB,eAAeU,WAAAA,EAAAA,GAAgBN,YAAAA,EAAAA;AACxC,IAAA;;AAGA,IAAA,IAAIc,WAAWnB,iBAAAA,CAAAA,EAAoB;AACjC,QAAA,OAAOa,WAAAA,CAAYb,iBAAAA,CAAAA;AACrB,IAAA;;IAGAL,MAAAA,CAAOW,GAAG,CAACY,IAAI,CACb,mGAAA,CAAA;IAEF,OAAOP,WAAAA,EAAAA;AACT;AAEO,eAAeS,SAAAA,CAAU,EAAEzB,MAAM,EAA2B,EAAA;;IAEjE,MAAM0B,MAAAA,GAAS1B,OAAOE,MAAM,CAAC,WAAWE,OAAO,CAAC,eAAeuB,WAAW,EAAA;AAE1E,IAAA,IAAIC,QAAQF,MAAAA,CAAAA,EAAS;QACnB1B,MAAAA,CAAOW,GAAG,CAACY,IAAI,CAAC,+DAAA,CAAA;AAEhB,QAAA;AACF,IAAA;AAEA,IAAA,MAAM,EAAEtB,MAAM,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA;AAEjC,IAAA,MAAM2B,OAAe5B,MAAAA,CAAO,UAAA,CAAA;AAE5B,IAAA,MAAM6B,cAAc/B,oBAAAA,CAAqBC,MAAAA,CAAAA;AACzC;;;;;;;;AAQC,MACD,MAAM+B,sBAAAA,GAAmE;QACvE,MAAMC,eAAAA,CAAAA,GAAAA;YACJ,OAAO;gBACL,MAAMC,iBAAAA,CAAAA,GAAAA;oBACJ,OAAO;wBACLC,gBAAAA,CAAAA,CAAiB,EAAEC,MAAM,EAAEC,IAAI,EAAEC,YAAY,EAAEC,IAAI,EAAE,EAAA;AACnD,4BAAA,IAAI,CAACH,MAAAA,IAAUG,IAAAA,CAAKC,SAAS,CAACA,SAAS,KAAK,OAAA,EAAS;;gCAEnD,IAAI,CAACF,YAAAA,CAAaG,mBAAmB,EAAE;oCACrCH,YAAAA,CAAaG,mBAAmB,GAAG,IAAIC,GAAAA,EAAAA;AACzC,gCAAA;gCACAJ,YAAAA,CAAaG,mBAAmB,CAACE,GAAG,CAACJ,KAAKT,IAAI,CAACc,GAAG,EAAE;AAClD,oCAAA,GAAGP,IAAI;AACPQ,oCAAAA,YAAAA,EAAcN,KAAKO;AACrB,iCAAA,CAAA;AACF,4BAAA;AACF,wBAAA;AACF,qBAAA;AACF,gBAAA;AACF,aAAA;AACF,QAAA;AACF,KAAA;AAQA,IAAA,MAAMC,mBAAAA,GAAiF;;AAErFpB,QAAAA,MAAAA;;QAGAqB,eAAAA,EAAiB;AAACC,YAAAA,UAAAA,CAAW/C,MAAAA,CAAO,YAAA,CAAA;AAAgC,SAAA;;QAGpEgD,WAAAA,EAAaC,kBAAAA;;QAGbC,IAAAA,EAAM7B,SAAAA;QACN8B,OAAAA,EAAS,KAAA;QACTC,gBAAAA,EAAkB,IAAA;;QAElBC,kCAAAA,EAAoC,IAAA;QACpCC,OAAAA,EAAS;AAACzB,YAAAA,WAAAA;AAAaC,YAAAA;AAAuB,SAAA;QAE9CyB,KAAAA,EAAO;AACT,KAAA;IAEA,MAAMC,YAAAA,GAAehE,KAAAA,CACnBqD,mBAAAA,EACA7C,MAAAA,CAAO,cAAA,CAAA,CAAA;;IAIT,MAAMyD,MAAAA,GAAS,IAAIC,YAAAA,CAAaF,YAAAA,CAAAA;IAEhC,IAAI;;AAEF,QAAA,MAAMC,OAAOE,KAAK,EAAA;AACpB,IAAA,CAAA,CAAE,OAAOC,KAAAA,EAAO;AACd,QAAA,IAAIA,iBAAiBC,KAAAA,EAAO;AAC1B9D,YAAAA,MAAAA,CAAOW,GAAG,CAACkD,KAAK,CAAC,mCAAA,EAAqCA,MAAME,OAAO,CAAA;AACrE,QAAA;QAEA,MAAMF,KAAAA;AACR,IAAA;;AAGA,IAAA,MAAMG,UAAoC,EAAE;;IAG5C,IAAIP,YAAAA,CAAaN,IAAI,KAAK,KAAA,EAAO,CAEjC,MAAO,IAAIM,aAAaN,IAAI,KAAK7B,aAAamC,YAAAA,CAAaN,IAAI,KAAK,IAAA,EAAM;;AAExEa,QAAAA,OAAAA,CAAQC,IAAI,CAACd,IAAAA,EAAAA,CAAAA;IACf,CAAA,MAAO;;AAELa,QAAAA,OAAAA,CAAQC,IAAI,CAACd,IAAAA,CAAKM,YAAAA,CAAaN,IAAI,CAAA,CAAA;AACrC,IAAA;;IAGA,IAAIe,QAAAA,CAAST,YAAAA,CAAaJ,gBAAgB,CAAA,EAAG;AAC3CW,QAAAA,OAAAA,CAAQC,IAAI,CAACE,UAAAA,CAAWV,YAAAA,CAAaJ,gBAAgB,CAAA,CAAA;IACvD,CAAA,MAAO,IAAII,YAAAA,CAAaJ,gBAAgB,EAAE;AACxCW,QAAAA,OAAAA,CAAQC,IAAI,CAACE,UAAAA,EAAAA,CAAAA;IACf,CAAA,MAAO;QACLnE,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,iDAAA,CAAA;AACnB,IAAA;;IAGAoD,OAAAA,CAAQC,IAAI,CAAC,CAACG,GAAAA,EAAKC,IAAAA,GAAAA;QACjBD,GAAAA,CAAIE,KAAK,CAACC,KAAK,GAAG;YAChBjC,IAAAA,EAAM;;gBAEJkC,IAAAA,EAAM;AACR;AACF,SAAA;AAEA,QAAA,MAAMC,mBAAAA,GACJL,GAAAA,CAAIM,OAAO,CAACC,MAAM,KAAK,KAAA,IACvBP,GAAAA,CAAIM,OAAO,CAACE,GAAG,KAAK/C;QACpB7B,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWE,OAAO,CAAC,SAASS,UAAU,CAACgE,SAAS,EAAA;QAC9DT,GAAAA,CAAIM,OAAO,CAACI,MAAM,CAACC,MAAM,EAAEC,QAAAA,CAAS;;AAGtC,QAAA,IAAIP,mBAAAA,EAAqB;YACvB,OAAOJ,IAAAA,EAAAA;AACT,QAAA;AAEA,QAAA,OAAOrE,MAAAA,CAAOiF,IAAI,CAACC,YAAY,CAACd,GAAAA,EAAKC,IAAAA,CAAAA;AACvC,IAAA,CAAA,CAAA;;IAGAL,OAAAA,CAAQC,IAAI,CACVkB,aAAAA,CAA0DzB,MAAAA,EAAQ;;AAEhE0B,QAAAA,OAAAA,EAAS,OAAO,EAAEhB,GAAG,EAAE,IAAM;AAC3BE,gBAAAA,KAAAA,EAAOF,IAAIE,KAAK;gBAChBe,UAAAA,EAAYjB;aACd;AACF,KAAA,CAAA,CAAA;;IAIFpE,MAAAA,CAAO0D,MAAM,CAAC4B,MAAM,CAAC;AACnB,QAAA;YACEX,MAAAA,EAAQ,KAAA;AACR9C,YAAAA,IAAAA;AACAmC,YAAAA,OAAAA;YACA/D,MAAAA,EAAQ;gBACNgF,IAAAA,EAAM;AACR;AACF;AACD,KAAA,CAAA;;;;AAKDjF,IAAAA,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWqF,OAAO,GAAG,UAAA;AACjC,QAAA,MAAM7B,OAAO8B,IAAI,EAAA;AACnB,IAAA,CAAA;AACF;;;;"}
+{"version":3,"file":"bootstrap.mjs","sources":["../../server/src/bootstrap.ts"],"sourcesContent":["import { mergeWith, isEmpty, isObject } from 'lodash';\nimport { ApolloServer, type ApolloServerPlugin, type ApolloServerOptions } from '@apollo/server';\nimport {\n  ApolloServerPluginLandingPageLocalDefault,\n  ApolloServerPluginLandingPageProductionDefault,\n} from '@apollo/server/plugin/landingPage/default';\nimport { koaMiddleware } from '@as-integrations/koa';\nimport depthLimit from 'graphql-depth-limit';\nimport bodyParser from 'koa-bodyparser';\nimport cors from '@koa/cors';\n\nimport type { Core } from '@strapi/types';\nimport type { Options } from '@koa/cors';\nimport type { BaseContext, DefaultContextExtends, DefaultStateExtends } from 'koa';\n\nimport { formatGraphqlError } from './format-graphql-error';\n\ntype StrapiGraphQLContext = BaseContext & {\n  rootQueryArgsByPath?: Map<string | number, Record<string, unknown>>;\n};\n\ntype OperationLimitConfig = {\n  depthLimit?: unknown;\n  maxLimit?: unknown;\n};\n\nexport const getOperationLimitsWarning = ({\n  depthLimit: configuredDepthLimit,\n  maxLimit,\n}: OperationLimitConfig): string | undefined => {\n  const unboundedOrInvalidKeys: string[] = [];\n\n  if (\n    typeof configuredDepthLimit !== 'number' ||\n    !Number.isFinite(configuredDepthLimit) ||\n    configuredDepthLimit <= 0\n  ) {\n    unboundedOrInvalidKeys.push('depthLimit');\n  }\n\n  if (typeof maxLimit !== 'number' || !Number.isFinite(maxLimit) || maxLimit <= 0) {\n    unboundedOrInvalidKeys.push('maxLimit');\n  }\n\n  if (unboundedOrInvalidKeys.length === 0) {\n    return undefined;\n  }\n\n  return `Built-in GraphQL operation limits are unbounded or invalid for: ${unboundedOrInvalidKeys.join(', ')}. Configure these limits (for example: defaultLimit: 25, maxLimit: 100, depthLimit: 10). Custom Apollo validation rules may independently enforce limits. See https://docs.strapi.io/cms/configurations/plugins.`;\n};\n\nexport const determineLandingPage = (\n  strapi: Core.Strapi\n): ApolloServerPlugin<StrapiGraphQLContext> => {\n  const { config } = strapi.plugin('graphql');\n  const utils = strapi.plugin('graphql').service('utils');\n\n  /**\n   * configLanding page may be one of the following:\n   *\n   * - true: always use \"playground\" even in production\n   * - false: never show \"playground\" even in non-production\n   * - undefined: default Apollo behavior (hide playground on production)\n   * - a function that returns an Apollo plugin that implements renderLandingPage\n   ** */\n  const configLandingPage = config<\n    boolean | ((strapi?: Core.Strapi) => ApolloServerPlugin | boolean)\n  >('landingPage');\n\n  const isProduction = process.env.NODE_ENV === 'production';\n\n  const localLanding = () => {\n    strapi.log.debug('Apollo landing page: local');\n    utils.playground.setEnabled(true);\n    return ApolloServerPluginLandingPageLocalDefault();\n  };\n\n  const prodLanding = () => {\n    strapi.log.debug('Apollo landing page: production');\n    utils.playground.setEnabled(false);\n    return ApolloServerPluginLandingPageProductionDefault();\n  };\n\n  const userLanding = (userFunction: (strapi?: Core.Strapi) => ApolloServerPlugin | boolean) => {\n    strapi.log.debug('Apollo landing page: from user-defined function...');\n    const result = userFunction(strapi);\n    if (result === true) {\n      return localLanding();\n    }\n    if (result === false) {\n      return prodLanding();\n    }\n    strapi.log.debug('Apollo landing page: user-defined');\n    return result;\n  };\n\n  // DEPRECATED, remove in Strapi v6\n  const playgroundAlways = config('playgroundAlways');\n  if (playgroundAlways !== undefined) {\n    strapi.log.warn(\n      'The graphql config playgroundAlways is deprecated. This will be removed in Strapi 6. Please use landingPage instead. '\n    );\n  }\n  if (playgroundAlways === false) {\n    strapi.log.warn(\n      'graphql config playgroundAlways:false has no effect, please use landingPage:false to disable Graphql Playground in all environments'\n    );\n  }\n\n  if (playgroundAlways || configLandingPage === true) {\n    return localLanding();\n  }\n\n  // if landing page has been disabled, use production\n  if (configLandingPage === false) {\n    return prodLanding();\n  }\n\n  // If user did not define any settings, use our defaults\n  if (configLandingPage === undefined) {\n    return isProduction ? prodLanding() : localLanding();\n  }\n\n  // if user provided a landing page function, return that\n  if (typeof configLandingPage === 'function') {\n    return userLanding(configLandingPage);\n  }\n\n  // If no other setting could be found, default to production settings\n  strapi.log.warn(\n    'Your Graphql landing page has been disabled because there is a problem with your Graphql settings'\n  );\n  return prodLanding();\n};\n\nexport async function bootstrap({ strapi }: { strapi: Core.Strapi }) {\n  // Generate the GraphQL schema for the content API\n  const schema = strapi.plugin('graphql').service('content-api').buildSchema();\n\n  if (isEmpty(schema)) {\n    strapi.log.warn('The GraphQL schema has not been generated because it is empty');\n\n    return;\n  }\n\n  const { config } = strapi.plugin('graphql');\n\n  const path: string = config('endpoint');\n  const configuredDepthLimit = config('depthLimit');\n  const maxLimit = config('maxLimit');\n  const operationLimitsWarning = getOperationLimitsWarning({\n    depthLimit: configuredDepthLimit,\n    maxLimit,\n  });\n\n  if (operationLimitsWarning) {\n    strapi.log.warn(operationLimitsWarning);\n  }\n\n  const landingPage = determineLandingPage(strapi);\n  /**\n   * We need the arguments passed to the root query to be available in the association resolver\n   * so we can forward those arguments along to any relations.\n   *\n   * In order to do that we are currently storing the arguments in context.\n   * There is likely a better solution, but for now this is the simplest fix we could find.\n   *\n   * @see https://github.com/strapi/strapi/issues/23524\n   */\n  const pluginAddRootQueryArgs: ApolloServerPlugin<StrapiGraphQLContext> = {\n    async requestDidStart() {\n      return {\n        async executionDidStart() {\n          return {\n            willResolveField({ source, args, contextValue, info }) {\n              if (!source && info.operation.operation === 'query') {\n                // Key args per root field (alias)\n                if (!contextValue.rootQueryArgsByPath) {\n                  contextValue.rootQueryArgsByPath = new Map();\n                }\n                contextValue.rootQueryArgsByPath.set(info.path.key, {\n                  ...args,\n                  _originField: info.fieldName,\n                });\n              }\n            },\n          };\n        },\n      };\n    },\n  };\n\n  type CustomOptions = {\n    cors?: boolean | Options;\n    uploads: boolean;\n    bodyParserConfig: boolean;\n  };\n\n  const defaultServerConfig: ApolloServerOptions<StrapiGraphQLContext> & CustomOptions = {\n    // Schema\n    schema,\n\n    // Validation\n    // Keep v5 compatibility: depthLimit is passed through unchanged, so an unset or invalid value\n    // does not become an enforced finite limit during an upgrade.\n    validationRules: [depthLimit(configuredDepthLimit as number) as any],\n\n    // Errors\n    formatError: formatGraphqlError,\n\n    // Misc\n    cors: undefined,\n    uploads: false,\n    bodyParserConfig: true,\n    // send 400 http status instead of 200 for input validation errors\n    status400ForVariableCoercionErrors: true,\n    plugins: [landingPage, pluginAddRootQueryArgs],\n\n    cache: 'bounded' as const,\n  };\n\n  const serverConfig = mergeWith(\n    {},\n    defaultServerConfig,\n    config('apolloServer'),\n    (a: unknown, b: unknown) => {\n      if (Array.isArray(a) && Array.isArray(b)) {\n        return a.concat(b);\n      }\n      return undefined;\n    }\n  ) as ApolloServerOptions<StrapiGraphQLContext> & CustomOptions;\n\n  // Create a new Apollo server\n  const server = new ApolloServer(serverConfig);\n\n  try {\n    // server.start() must be called before using server.applyMiddleware()\n    await server.start();\n  } catch (error) {\n    if (error instanceof Error) {\n      strapi.log.error('Failed to start the Apollo server', error.message);\n    }\n\n    throw error;\n  }\n\n  // Create the route handlers for Strapi\n  const handler: Core.MiddlewareHandler[] = [];\n\n  // add cors middleware\n  if (serverConfig.cors === false) {\n    // Explicitly disabled - don't add middleware\n  } else if (serverConfig.cors === undefined || serverConfig.cors === true) {\n    // enable with defaults (backwards compatible)\n    handler.push(cors());\n  } else {\n    // Custom options object\n    handler.push(cors(serverConfig.cors));\n  }\n\n  // add koa bodyparser middleware\n  if (isObject(serverConfig.bodyParserConfig)) {\n    handler.push(bodyParser(serverConfig.bodyParserConfig));\n  } else if (serverConfig.bodyParserConfig) {\n    handler.push(bodyParser());\n  } else {\n    strapi.log.debug('Body parser has been disabled for Apollo server');\n  }\n\n  // add the Strapi auth middleware\n  handler.push((ctx, next) => {\n    ctx.state.route = {\n      info: {\n        // Indicate it's a content API route\n        type: 'content-api',\n      },\n    };\n\n    const isPlaygroundRequest =\n      ctx.request.method === 'GET' &&\n      ctx.request.url === path && // Matches the GraphQL endpoint\n      strapi.plugin('graphql').service('utils').playground.isEnabled() && // Only allow if the Playground is enabled\n      ctx.request.header.accept?.includes('text/html'); // Specific to Playground UI loading\n\n    // Skip authentication for the GraphQL Playground UI\n    if (isPlaygroundRequest) {\n      return next();\n    }\n\n    return strapi.auth.authenticate(ctx, next);\n  });\n\n  // add the graphql server for koa\n  handler.push(\n    koaMiddleware<DefaultStateExtends, DefaultContextExtends>(server, {\n      // Initialize loaders for this request.\n      context: async ({ ctx }) => ({\n        state: ctx.state,\n        koaContext: ctx,\n      }),\n    })\n  );\n\n  // now that handlers are set up, add the graphql route to our apollo server\n  strapi.server.routes([\n    {\n      method: 'ALL',\n      path,\n      handler,\n      config: {\n        auth: false,\n      },\n    },\n  ]);\n\n  // Register destroy behavior\n  // We're doing it here instead of exposing a destroy method to the strapi-server.js\n  // file since we need to have access to the ApolloServer instance\n  strapi.plugin('graphql').destroy = async () => {\n    await server.stop();\n  };\n}\n"],"names":["getOperationLimitsWarning","depthLimit","configuredDepthLimit","maxLimit","unboundedOrInvalidKeys","Number","isFinite","push","length","undefined","join","determineLandingPage","strapi","config","plugin","utils","service","configLandingPage","isProduction","process","env","NODE_ENV","localLanding","log","debug","playground","setEnabled","ApolloServerPluginLandingPageLocalDefault","prodLanding","ApolloServerPluginLandingPageProductionDefault","userLanding","userFunction","result","playgroundAlways","warn","bootstrap","schema","buildSchema","isEmpty","path","operationLimitsWarning","landingPage","pluginAddRootQueryArgs","requestDidStart","executionDidStart","willResolveField","source","args","contextValue","info","operation","rootQueryArgsByPath","Map","set","key","_originField","fieldName","defaultServerConfig","validationRules","formatError","formatGraphqlError","cors","uploads","bodyParserConfig","status400ForVariableCoercionErrors","plugins","cache","serverConfig","mergeWith","a","b","Array","isArray","concat","server","ApolloServer","start","error","Error","message","handler","isObject","bodyParser","ctx","next","state","route","type","isPlaygroundRequest","request","method","url","isEnabled","header","accept","includes","auth","authenticate","koaMiddleware","context","koaContext","routes","destroy","stop"],"mappings":";;;;;;;;;AA0BO,MAAMA,4BAA4B,CAAC,EACxCC,YAAYC,oBAAoB,EAChCC,QAAQ,EACa,GAAA;AACrB,IAAA,MAAMC,yBAAmC,EAAE;IAE3C,IACE,OAAOF,yBAAyB,QAAA,IAChC,CAACG,OAAOC,QAAQ,CAACJ,oBAAAA,CAAAA,IACjBA,oBAAAA,IAAwB,CAAA,EACxB;AACAE,QAAAA,sBAAAA,CAAuBG,IAAI,CAAC,YAAA,CAAA;AAC9B,IAAA;IAEA,IAAI,OAAOJ,aAAa,QAAA,IAAY,CAACE,OAAOC,QAAQ,CAACH,QAAAA,CAAAA,IAAaA,QAAAA,IAAY,CAAA,EAAG;AAC/EC,QAAAA,sBAAAA,CAAuBG,IAAI,CAAC,UAAA,CAAA;AAC9B,IAAA;IAEA,IAAIH,sBAAAA,CAAuBI,MAAM,KAAK,CAAA,EAAG;QACvC,OAAOC,SAAAA;AACT,IAAA;IAEA,OAAO,CAAC,gEAAgE,EAAEL,sBAAAA,CAAuBM,IAAI,CAAC,IAAA,CAAA,CAAM,gNAAgN,CAAC;AAC/T;AAEO,MAAMC,uBAAuB,CAClCC,MAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEC,MAAM,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA;AACjC,IAAA,MAAMC,QAAQH,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWE,OAAO,CAAC,OAAA,CAAA;AAE/C;;;;;;;SAQA,MAAMC,oBAAoBJ,MAAAA,CAExB,aAAA,CAAA;AAEF,IAAA,MAAMK,YAAAA,GAAeC,OAAAA,CAAQC,GAAG,CAACC,QAAQ,KAAK,YAAA;AAE9C,IAAA,MAAMC,YAAAA,GAAe,IAAA;QACnBV,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,4BAAA,CAAA;QACjBT,KAAAA,CAAMU,UAAU,CAACC,UAAU,CAAC,IAAA,CAAA;QAC5B,OAAOC,yCAAAA,EAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMC,WAAAA,GAAc,IAAA;QAClBhB,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,iCAAA,CAAA;QACjBT,KAAAA,CAAMU,UAAU,CAACC,UAAU,CAAC,KAAA,CAAA;QAC5B,OAAOG,8CAAAA,EAAAA;AACT,IAAA,CAAA;AAEA,IAAA,MAAMC,cAAc,CAACC,YAAAA,GAAAA;QACnBnB,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,oDAAA,CAAA;AACjB,QAAA,MAAMQ,SAASD,YAAAA,CAAanB,MAAAA,CAAAA;AAC5B,QAAA,IAAIoB,WAAW,IAAA,EAAM;YACnB,OAAOV,YAAAA,EAAAA;AACT,QAAA;AACA,QAAA,IAAIU,WAAW,KAAA,EAAO;YACpB,OAAOJ,WAAAA,EAAAA;AACT,QAAA;QACAhB,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,mCAAA,CAAA;QACjB,OAAOQ,MAAAA;AACT,IAAA,CAAA;;AAGA,IAAA,MAAMC,mBAAmBpB,MAAAA,CAAO,kBAAA,CAAA;AAChC,IAAA,IAAIoB,qBAAqBxB,SAAAA,EAAW;QAClCG,MAAAA,CAAOW,GAAG,CAACW,IAAI,CACb,uHAAA,CAAA;AAEJ,IAAA;AACA,IAAA,IAAID,qBAAqB,KAAA,EAAO;QAC9BrB,MAAAA,CAAOW,GAAG,CAACW,IAAI,CACb,qIAAA,CAAA;AAEJ,IAAA;IAEA,IAAID,gBAAAA,IAAoBhB,sBAAsB,IAAA,EAAM;QAClD,OAAOK,YAAAA,EAAAA;AACT,IAAA;;AAGA,IAAA,IAAIL,sBAAsB,KAAA,EAAO;QAC/B,OAAOW,WAAAA,EAAAA;AACT,IAAA;;AAGA,IAAA,IAAIX,sBAAsBR,SAAAA,EAAW;AACnC,QAAA,OAAOS,eAAeU,WAAAA,EAAAA,GAAgBN,YAAAA,EAAAA;AACxC,IAAA;;IAGA,IAAI,OAAOL,sBAAsB,UAAA,EAAY;AAC3C,QAAA,OAAOa,WAAAA,CAAYb,iBAAAA,CAAAA;AACrB,IAAA;;IAGAL,MAAAA,CAAOW,GAAG,CAACW,IAAI,CACb,mGAAA,CAAA;IAEF,OAAON,WAAAA,EAAAA;AACT;AAEO,eAAeO,SAAAA,CAAU,EAAEvB,MAAM,EAA2B,EAAA;;IAEjE,MAAMwB,MAAAA,GAASxB,OAAOE,MAAM,CAAC,WAAWE,OAAO,CAAC,eAAeqB,WAAW,EAAA;AAE1E,IAAA,IAAIC,QAAQF,MAAAA,CAAAA,EAAS;QACnBxB,MAAAA,CAAOW,GAAG,CAACW,IAAI,CAAC,+DAAA,CAAA;AAEhB,QAAA;AACF,IAAA;AAEA,IAAA,MAAM,EAAErB,MAAM,EAAE,GAAGD,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA;AAEjC,IAAA,MAAMyB,OAAe1B,MAAAA,CAAO,UAAA,CAAA;AAC5B,IAAA,MAAMX,uBAAuBW,MAAAA,CAAO,YAAA,CAAA;AACpC,IAAA,MAAMV,WAAWU,MAAAA,CAAO,UAAA,CAAA;AACxB,IAAA,MAAM2B,yBAAyBxC,yBAAAA,CAA0B;QACvDC,UAAAA,EAAYC,oBAAAA;AACZC,QAAAA;AACF,KAAA,CAAA;AAEA,IAAA,IAAIqC,sBAAAA,EAAwB;QAC1B5B,MAAAA,CAAOW,GAAG,CAACW,IAAI,CAACM,sBAAAA,CAAAA;AAClB,IAAA;AAEA,IAAA,MAAMC,cAAc9B,oBAAAA,CAAqBC,MAAAA,CAAAA;AACzC;;;;;;;;AAQC,MACD,MAAM8B,sBAAAA,GAAmE;QACvE,MAAMC,eAAAA,CAAAA,GAAAA;YACJ,OAAO;gBACL,MAAMC,iBAAAA,CAAAA,GAAAA;oBACJ,OAAO;wBACLC,gBAAAA,CAAAA,CAAiB,EAAEC,MAAM,EAAEC,IAAI,EAAEC,YAAY,EAAEC,IAAI,EAAE,EAAA;AACnD,4BAAA,IAAI,CAACH,MAAAA,IAAUG,IAAAA,CAAKC,SAAS,CAACA,SAAS,KAAK,OAAA,EAAS;;gCAEnD,IAAI,CAACF,YAAAA,CAAaG,mBAAmB,EAAE;oCACrCH,YAAAA,CAAaG,mBAAmB,GAAG,IAAIC,GAAAA,EAAAA;AACzC,gCAAA;gCACAJ,YAAAA,CAAaG,mBAAmB,CAACE,GAAG,CAACJ,KAAKV,IAAI,CAACe,GAAG,EAAE;AAClD,oCAAA,GAAGP,IAAI;AACPQ,oCAAAA,YAAAA,EAAcN,KAAKO;AACrB,iCAAA,CAAA;AACF,4BAAA;AACF,wBAAA;AACF,qBAAA;AACF,gBAAA;AACF,aAAA;AACF,QAAA;AACF,KAAA;AAQA,IAAA,MAAMC,mBAAAA,GAAiF;;AAErFrB,QAAAA,MAAAA;;;;QAKAsB,eAAAA,EAAiB;YAACzD,UAAAA,CAAWC,oBAAAA;AAAuC,SAAA;;QAGpEyD,WAAAA,EAAaC,kBAAAA;;QAGbC,IAAAA,EAAMpD,SAAAA;QACNqD,OAAAA,EAAS,KAAA;QACTC,gBAAAA,EAAkB,IAAA;;QAElBC,kCAAAA,EAAoC,IAAA;QACpCC,OAAAA,EAAS;AAACxB,YAAAA,WAAAA;AAAaC,YAAAA;AAAuB,SAAA;QAE9CwB,KAAAA,EAAO;AACT,KAAA;IAEA,MAAMC,YAAAA,GAAeC,UACnB,EAAC,EACDX,qBACA5C,MAAAA,CAAO,cAAA,CAAA,EACP,CAACwD,CAAAA,EAAYC,CAAAA,GAAAA;AACX,QAAA,IAAIC,MAAMC,OAAO,CAACH,MAAME,KAAAA,CAAMC,OAAO,CAACF,CAAAA,CAAAA,EAAI;YACxC,OAAOD,CAAAA,CAAEI,MAAM,CAACH,CAAAA,CAAAA;AAClB,QAAA;QACA,OAAO7D,SAAAA;AACT,IAAA,CAAA,CAAA;;IAIF,MAAMiE,MAAAA,GAAS,IAAIC,YAAAA,CAAaR,YAAAA,CAAAA;IAEhC,IAAI;;AAEF,QAAA,MAAMO,OAAOE,KAAK,EAAA;AACpB,IAAA,CAAA,CAAE,OAAOC,KAAAA,EAAO;AACd,QAAA,IAAIA,iBAAiBC,KAAAA,EAAO;AAC1BlE,YAAAA,MAAAA,CAAOW,GAAG,CAACsD,KAAK,CAAC,mCAAA,EAAqCA,MAAME,OAAO,CAAA;AACrE,QAAA;QAEA,MAAMF,KAAAA;AACR,IAAA;;AAGA,IAAA,MAAMG,UAAoC,EAAE;;IAG5C,IAAIb,YAAAA,CAAaN,IAAI,KAAK,KAAA,EAAO,CAEjC,MAAO,IAAIM,aAAaN,IAAI,KAAKpD,aAAa0D,YAAAA,CAAaN,IAAI,KAAK,IAAA,EAAM;;AAExEmB,QAAAA,OAAAA,CAAQzE,IAAI,CAACsD,IAAAA,EAAAA,CAAAA;IACf,CAAA,MAAO;;AAELmB,QAAAA,OAAAA,CAAQzE,IAAI,CAACsD,IAAAA,CAAKM,YAAAA,CAAaN,IAAI,CAAA,CAAA;AACrC,IAAA;;IAGA,IAAIoB,QAAAA,CAASd,YAAAA,CAAaJ,gBAAgB,CAAA,EAAG;AAC3CiB,QAAAA,OAAAA,CAAQzE,IAAI,CAAC2E,UAAAA,CAAWf,YAAAA,CAAaJ,gBAAgB,CAAA,CAAA;IACvD,CAAA,MAAO,IAAII,YAAAA,CAAaJ,gBAAgB,EAAE;AACxCiB,QAAAA,OAAAA,CAAQzE,IAAI,CAAC2E,UAAAA,EAAAA,CAAAA;IACf,CAAA,MAAO;QACLtE,MAAAA,CAAOW,GAAG,CAACC,KAAK,CAAC,iDAAA,CAAA;AACnB,IAAA;;IAGAwD,OAAAA,CAAQzE,IAAI,CAAC,CAAC4E,GAAAA,EAAKC,IAAAA,GAAAA;QACjBD,GAAAA,CAAIE,KAAK,CAACC,KAAK,GAAG;YAChBrC,IAAAA,EAAM;;gBAEJsC,IAAAA,EAAM;AACR;AACF,SAAA;AAEA,QAAA,MAAMC,mBAAAA,GACJL,GAAAA,CAAIM,OAAO,CAACC,MAAM,KAAK,KAAA,IACvBP,GAAAA,CAAIM,OAAO,CAACE,GAAG,KAAKpD;QACpB3B,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWE,OAAO,CAAC,SAASS,UAAU,CAACmE,SAAS,EAAA;QAC9DT,GAAAA,CAAIM,OAAO,CAACI,MAAM,CAACC,MAAM,EAAEC,QAAAA,CAAS;;AAGtC,QAAA,IAAIP,mBAAAA,EAAqB;YACvB,OAAOJ,IAAAA,EAAAA;AACT,QAAA;AAEA,QAAA,OAAOxE,MAAAA,CAAOoF,IAAI,CAACC,YAAY,CAACd,GAAAA,EAAKC,IAAAA,CAAAA;AACvC,IAAA,CAAA,CAAA;;IAGAJ,OAAAA,CAAQzE,IAAI,CACV2F,aAAAA,CAA0DxB,MAAAA,EAAQ;;AAEhEyB,QAAAA,OAAAA,EAAS,OAAO,EAAEhB,GAAG,EAAE,IAAM;AAC3BE,gBAAAA,KAAAA,EAAOF,IAAIE,KAAK;gBAChBe,UAAAA,EAAYjB;aACd;AACF,KAAA,CAAA,CAAA;;IAIFvE,MAAAA,CAAO8D,MAAM,CAAC2B,MAAM,CAAC;AACnB,QAAA;YACEX,MAAAA,EAAQ,KAAA;AACRnD,YAAAA,IAAAA;AACAyC,YAAAA,OAAAA;YACAnE,MAAAA,EAAQ;gBACNmF,IAAAA,EAAM;AACR;AACF;AACD,KAAA,CAAA;;;;AAKDpF,IAAAA,MAAAA,CAAOE,MAAM,CAAC,SAAA,CAAA,CAAWwF,OAAO,GAAG,UAAA;AACjC,QAAA,MAAM5B,OAAO6B,IAAI,EAAA;AACnB,IAAA,CAAA;AACF;;;;"}

package/dist/server/format-graphql-error.js

@@ -1,18 +1,18 @@
 'use strict';
 
-var fp = require('lodash/fp');
+var lodash = require('lodash');
 var utils = require('@strapi/utils');
 var errors = require('@apollo/server/errors');
 var graphql = require('graphql');
 
 const { HttpError, ForbiddenError, UnauthorizedError, ApplicationError, ValidationError } = utils.errors;
-const formatToCode = (name)=>`STRAPI_${fp.toUpper(fp.snakeCase(name))}`;
+const formatToCode = (name)=>`STRAPI_${lodash.snakeCase(name).toUpperCase()}`;
 const formatErrorToExtension = (error)=>({
-        error: fp.pick([
+        error: lodash.pick(error, [
             'name',
             'message',
             'details'
-        ])(error)
+        ])
     });
 function createFormattedError(formattedError, message, code, originalError) {
     const options = {
@@ -31,8 +31,10 @@ function createFormattedError(formattedError, message, code, originalError) {
  * Intercepts specific Strapi error types to send custom error response codes in the GraphQL response
  */ function formatGraphqlError(formattedError, error) {
     const originalError = errors.unwrapResolverError(error);
-    // If this error doesn't have an associated originalError, it
-    if (fp.isEmpty(originalError)) {
+    // Nothing to inspect, so keep Apollo's own formatted error. This must not be an emptiness check:
+    // an Error only has non-enumerable fields (message, stack), so lodash isEmpty reports it as
+    // empty and a bare Error from a resolver would reach the client with its message
+    if (originalError === null || originalError === undefined) {
         return formattedError;
     }
     const { message = '', name = 'UNKNOWN' } = originalError;
@@ -52,8 +54,32 @@ function createFormattedError(formattedError, message, code, originalError) {
     // else if originalError doesn't appear to be from Strapi or GraphQL..
     // Log the error
     strapi.log.error(originalError);
-    // Create a generic 500 to send so we don't risk leaking any data
-    return createFormattedError(new graphql.GraphQLError('Internal Server Error'), 'Internal Server Error', 'INTERNAL_SERVER_ERROR', originalError);
+    // Create a generic 500 to send so we don't risk leaking any data. The error that went to the log
+    // is not passed on: its name, message and details can hold SQL with bound values, hostnames and
+    // driver reasons. The extension carries the same error shape as the REST 500 body.
+    // path and locations stay: they name the field and the place in the query, and clients use them
+    // to attach the error. A fresh GraphQLError does not copy locations (the constructor only
+    // derives them from source positions), and spreading formattedError would also copy
+    // extensions.stacktrace in development.
+    const sanitized = createFormattedError({
+        message: 'Internal Server Error',
+        path: formattedError.path
+    }, 'Internal Server Error', 'INTERNAL_SERVER_ERROR', {
+        name: 'InternalServerError',
+        message: 'Internal Server Error'
+    });
+    // The GraphQLError type marks locations readonly. The constructor still creates a writable,
+    // enumerable field, and it will not copy locations off a formatted error, so set the field
+    // directly. Clients read it from toJSON().
+    if (formattedError.locations != null) {
+        Object.defineProperty(sanitized, 'locations', {
+            value: formattedError.locations,
+            enumerable: true,
+            writable: true,
+            configurable: true
+        });
+    }
+    return sanitized;
 }
 
 exports.formatGraphqlError = formatGraphqlError;

package/dist/server/format-graphql-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"format-graphql-error.js","sources":["../../server/src/format-graphql-error.ts"],"sourcesContent":["import { toUpper, snakeCase, pick, isEmpty } from 'lodash/fp';\nimport { errors } from '@strapi/utils';\nimport { unwrapResolverError } from '@apollo/server/errors';\nimport { GraphQLError, type GraphQLFormattedError } from 'graphql';\n\nconst { HttpError, ForbiddenError, UnauthorizedError, ApplicationError, ValidationError } = errors;\n\nconst formatToCode = (name: string) => `STRAPI_${toUpper(snakeCase(name))}`;\nconst formatErrorToExtension = (error: any) => ({\n  error: pick(['name', 'message', 'details'])(error),\n});\n\nfunction createFormattedError(\n  formattedError: GraphQLFormattedError,\n  message: string,\n  code: string,\n  originalError: unknown\n) {\n  const options = {\n    ...formattedError,\n    extensions: {\n      ...formattedError.extensions,\n      ...formatErrorToExtension(originalError),\n      code,\n    },\n  };\n\n  return new GraphQLError(message, options);\n}\n\n/**\n * The handler for Apollo Server v4's formatError config option\n *\n * Intercepts specific Strapi error types to send custom error response codes in the GraphQL response\n */\nexport function formatGraphqlError(formattedError: GraphQLFormattedError, error: unknown) {\n  const originalError = unwrapResolverError(error);\n\n  // If this error doesn't have an associated originalError, it\n  if (isEmpty(originalError)) {\n    return formattedError;\n  }\n\n  const { message = '', name = 'UNKNOWN' } = originalError as Error;\n\n  if (originalError instanceof ForbiddenError || originalError instanceof UnauthorizedError) {\n    return createFormattedError(formattedError, message, 'FORBIDDEN', originalError);\n  }\n\n  if (originalError instanceof ValidationError) {\n    return createFormattedError(formattedError, message, 'BAD_USER_INPUT', originalError);\n  }\n\n  if (originalError instanceof ApplicationError || originalError instanceof HttpError) {\n    const errorName = formatToCode(name);\n    return createFormattedError(formattedError, message, errorName, originalError);\n  }\n\n  if (originalError instanceof GraphQLError) {\n    return formattedError;\n  }\n\n  // else if originalError doesn't appear to be from Strapi or GraphQL..\n\n  // Log the error\n  strapi.log.error(originalError);\n\n  // Create a generic 500 to send so we don't risk leaking any data\n  return createFormattedError(\n    new GraphQLError('Internal Server Error'),\n    'Internal Server Error',\n    'INTERNAL_SERVER_ERROR',\n    originalError\n  );\n}\n"],"names":["HttpError","ForbiddenError","UnauthorizedError","ApplicationError","ValidationError","errors","formatToCode","name","toUpper","snakeCase","formatErrorToExtension","error","pick","createFormattedError","formattedError","message","code","originalError","options","extensions","GraphQLError","formatGraphqlError","unwrapResolverError","isEmpty","errorName","strapi","log"],"mappings":";;;;;;;AAKA,MAAM,EAAEA,SAAS,EAAEC,cAAc,EAAEC,iBAAiB,EAAEC,gBAAgB,EAAEC,eAAe,EAAE,GAAGC,YAAAA;AAE5F,MAAMC,YAAAA,GAAe,CAACC,IAAAA,GAAiB,CAAC,OAAO,EAAEC,UAAAA,CAAQC,aAAUF,IAAAA,CAAAA,CAAAA,CAAAA,CAAQ;AAC3E,MAAMG,sBAAAA,GAAyB,CAACC,KAAAA,IAAgB;AAC9CA,QAAAA,KAAAA,EAAOC,OAAAA,CAAK;AAAC,YAAA,MAAA;AAAQ,YAAA,SAAA;AAAW,YAAA;SAAU,CAAA,CAAED,KAAAA;KAC9C,CAAA;AAEA,SAASE,qBACPC,cAAqC,EACrCC,OAAe,EACfC,IAAY,EACZC,aAAsB,EAAA;AAEtB,IAAA,MAAMC,OAAAA,GAAU;AACd,QAAA,GAAGJ,cAAc;QACjBK,UAAAA,EAAY;AACV,YAAA,GAAGL,eAAeK,UAAU;AAC5B,YAAA,GAAGT,uBAAuBO,aAAAA,CAAc;AACxCD,YAAAA;AACF;AACF,KAAA;IAEA,OAAO,IAAII,qBAAaL,OAAAA,EAASG,OAAAA,CAAAA;AACnC;AAEA;;;;AAIC,IACM,SAASG,kBAAAA,CAAmBP,cAAqC,EAAEH,KAAc,EAAA;AACtF,IAAA,MAAMM,gBAAgBK,0BAAAA,CAAoBX,KAAAA,CAAAA;;AAG1C,IAAA,IAAIY,WAAQN,aAAAA,CAAAA,EAAgB;QAC1B,OAAOH,cAAAA;AACT,IAAA;AAEA,IAAA,MAAM,EAAEC,OAAAA,GAAU,EAAE,EAAER,IAAAA,GAAO,SAAS,EAAE,GAAGU,aAAAA;IAE3C,IAAIA,aAAAA,YAAyBhB,cAAAA,IAAkBgB,aAAAA,YAAyBf,iBAAAA,EAAmB;QACzF,OAAOW,oBAAAA,CAAqBC,cAAAA,EAAgBC,OAAAA,EAAS,WAAA,EAAaE,aAAAA,CAAAA;AACpE,IAAA;AAEA,IAAA,IAAIA,yBAAyBb,eAAAA,EAAiB;QAC5C,OAAOS,oBAAAA,CAAqBC,cAAAA,EAAgBC,OAAAA,EAAS,gBAAA,EAAkBE,aAAAA,CAAAA;AACzE,IAAA;IAEA,IAAIA,aAAAA,YAAyBd,gBAAAA,IAAoBc,aAAAA,YAAyBjB,SAAAA,EAAW;AACnF,QAAA,MAAMwB,YAAYlB,YAAAA,CAAaC,IAAAA,CAAAA;QAC/B,OAAOM,oBAAAA,CAAqBC,cAAAA,EAAgBC,OAAAA,EAASS,SAAAA,EAAWP,aAAAA,CAAAA;AAClE,IAAA;AAEA,IAAA,IAAIA,yBAAyBG,oBAAAA,EAAc;QACzC,OAAON,cAAAA;AACT,IAAA;;;IAKAW,MAAAA,CAAOC,GAAG,CAACf,KAAK,CAACM,aAAAA,CAAAA;;AAGjB,IAAA,OAAOJ,oBAAAA,CACL,IAAIO,oBAAAA,CAAa,uBAAA,CAAA,EACjB,yBACA,uBAAA,EACAH,aAAAA,CAAAA;AAEJ;;;;"}
+{"version":3,"file":"format-graphql-error.js","sources":["../../server/src/format-graphql-error.ts"],"sourcesContent":["import { snakeCase, pick } from 'lodash';\nimport { errors } from '@strapi/utils';\nimport { unwrapResolverError } from '@apollo/server/errors';\nimport { GraphQLError, type GraphQLFormattedError } from 'graphql';\n\nconst { HttpError, ForbiddenError, UnauthorizedError, ApplicationError, ValidationError } = errors;\n\nconst formatToCode = (name: string) => `STRAPI_${snakeCase(name).toUpperCase()}`;\nconst formatErrorToExtension = (error: any) => ({\n  error: pick(error, ['name', 'message', 'details']),\n});\n\nfunction createFormattedError(\n  formattedError: GraphQLFormattedError,\n  message: string,\n  code: string,\n  originalError: unknown\n) {\n  const options = {\n    ...formattedError,\n    extensions: {\n      ...formattedError.extensions,\n      ...formatErrorToExtension(originalError),\n      code,\n    },\n  };\n\n  return new GraphQLError(message, options);\n}\n\n/**\n * The handler for Apollo Server v4's formatError config option\n *\n * Intercepts specific Strapi error types to send custom error response codes in the GraphQL response\n */\nexport function formatGraphqlError(formattedError: GraphQLFormattedError, error: unknown) {\n  const originalError = unwrapResolverError(error);\n\n  // Nothing to inspect, so keep Apollo's own formatted error. This must not be an emptiness check:\n  // an Error only has non-enumerable fields (message, stack), so lodash isEmpty reports it as\n  // empty and a bare Error from a resolver would reach the client with its message\n  if (originalError === null || originalError === undefined) {\n    return formattedError;\n  }\n\n  const { message = '', name = 'UNKNOWN' } = originalError as Error;\n\n  if (originalError instanceof ForbiddenError || originalError instanceof UnauthorizedError) {\n    return createFormattedError(formattedError, message, 'FORBIDDEN', originalError);\n  }\n\n  if (originalError instanceof ValidationError) {\n    return createFormattedError(formattedError, message, 'BAD_USER_INPUT', originalError);\n  }\n\n  if (originalError instanceof ApplicationError || originalError instanceof HttpError) {\n    const errorName = formatToCode(name);\n    return createFormattedError(formattedError, message, errorName, originalError);\n  }\n\n  if (originalError instanceof GraphQLError) {\n    return formattedError;\n  }\n\n  // else if originalError doesn't appear to be from Strapi or GraphQL..\n\n  // Log the error\n  strapi.log.error(originalError);\n\n  // Create a generic 500 to send so we don't risk leaking any data. The error that went to the log\n  // is not passed on: its name, message and details can hold SQL with bound values, hostnames and\n  // driver reasons. The extension carries the same error shape as the REST 500 body.\n  // path and locations stay: they name the field and the place in the query, and clients use them\n  // to attach the error. A fresh GraphQLError does not copy locations (the constructor only\n  // derives them from source positions), and spreading formattedError would also copy\n  // extensions.stacktrace in development.\n  const sanitized = createFormattedError(\n    { message: 'Internal Server Error', path: formattedError.path },\n    'Internal Server Error',\n    'INTERNAL_SERVER_ERROR',\n    { name: 'InternalServerError', message: 'Internal Server Error' }\n  );\n  // The GraphQLError type marks locations readonly. The constructor still creates a writable,\n  // enumerable field, and it will not copy locations off a formatted error, so set the field\n  // directly. Clients read it from toJSON().\n  if (formattedError.locations != null) {\n    Object.defineProperty(sanitized, 'locations', {\n      value: formattedError.locations,\n      enumerable: true,\n      writable: true,\n      configurable: true,\n    });\n  }\n  return sanitized;\n}\n"],"names":["HttpError","ForbiddenError","UnauthorizedError","ApplicationError","ValidationError","errors","formatToCode","name","snakeCase","toUpperCase","formatErrorToExtension","error","pick","createFormattedError","formattedError","message","code","originalError","options","extensions","GraphQLError","formatGraphqlError","unwrapResolverError","undefined","errorName","strapi","log","sanitized","path","locations","Object","defineProperty","value","enumerable","writable","configurable"],"mappings":";;;;;;;AAKA,MAAM,EAAEA,SAAS,EAAEC,cAAc,EAAEC,iBAAiB,EAAEC,gBAAgB,EAAEC,eAAe,EAAE,GAAGC,YAAAA;AAE5F,MAAMC,YAAAA,GAAe,CAACC,IAAAA,GAAiB,CAAC,OAAO,EAAEC,gBAAAA,CAAUD,IAAAA,CAAAA,CAAME,WAAW,EAAA,CAAA,CAAI;AAChF,MAAMC,sBAAAA,GAAyB,CAACC,KAAAA,IAAgB;AAC9CA,QAAAA,KAAAA,EAAOC,YAAKD,KAAAA,EAAO;AAAC,YAAA,MAAA;AAAQ,YAAA,SAAA;AAAW,YAAA;AAAU,SAAA;KACnD,CAAA;AAEA,SAASE,qBACPC,cAAqC,EACrCC,OAAe,EACfC,IAAY,EACZC,aAAsB,EAAA;AAEtB,IAAA,MAAMC,OAAAA,GAAU;AACd,QAAA,GAAGJ,cAAc;QACjBK,UAAAA,EAAY;AACV,YAAA,GAAGL,eAAeK,UAAU;AAC5B,YAAA,GAAGT,uBAAuBO,aAAAA,CAAc;AACxCD,YAAAA;AACF;AACF,KAAA;IAEA,OAAO,IAAII,qBAAaL,OAAAA,EAASG,OAAAA,CAAAA;AACnC;AAEA;;;;AAIC,IACM,SAASG,kBAAAA,CAAmBP,cAAqC,EAAEH,KAAc,EAAA;AACtF,IAAA,MAAMM,gBAAgBK,0BAAAA,CAAoBX,KAAAA,CAAAA;;;;IAK1C,IAAIM,aAAAA,KAAkB,IAAA,IAAQA,aAAAA,KAAkBM,SAAAA,EAAW;QACzD,OAAOT,cAAAA;AACT,IAAA;AAEA,IAAA,MAAM,EAAEC,OAAAA,GAAU,EAAE,EAAER,IAAAA,GAAO,SAAS,EAAE,GAAGU,aAAAA;IAE3C,IAAIA,aAAAA,YAAyBhB,cAAAA,IAAkBgB,aAAAA,YAAyBf,iBAAAA,EAAmB;QACzF,OAAOW,oBAAAA,CAAqBC,cAAAA,EAAgBC,OAAAA,EAAS,WAAA,EAAaE,aAAAA,CAAAA;AACpE,IAAA;AAEA,IAAA,IAAIA,yBAAyBb,eAAAA,EAAiB;QAC5C,OAAOS,oBAAAA,CAAqBC,cAAAA,EAAgBC,OAAAA,EAAS,gBAAA,EAAkBE,aAAAA,CAAAA;AACzE,IAAA;IAEA,IAAIA,aAAAA,YAAyBd,gBAAAA,IAAoBc,aAAAA,YAAyBjB,SAAAA,EAAW;AACnF,QAAA,MAAMwB,YAAYlB,YAAAA,CAAaC,IAAAA,CAAAA;QAC/B,OAAOM,oBAAAA,CAAqBC,cAAAA,EAAgBC,OAAAA,EAASS,SAAAA,EAAWP,aAAAA,CAAAA;AAClE,IAAA;AAEA,IAAA,IAAIA,yBAAyBG,oBAAAA,EAAc;QACzC,OAAON,cAAAA;AACT,IAAA;;;IAKAW,MAAAA,CAAOC,GAAG,CAACf,KAAK,CAACM,aAAAA,CAAAA;;;;;;;;AASjB,IAAA,MAAMU,YAAYd,oBAAAA,CAChB;QAAEE,OAAAA,EAAS,uBAAA;AAAyBa,QAAAA,IAAAA,EAAMd,eAAec;AAAK,KAAA,EAC9D,yBACA,uBAAA,EACA;QAAErB,IAAAA,EAAM,qBAAA;QAAuBQ,OAAAA,EAAS;AAAwB,KAAA,CAAA;;;;IAKlE,IAAID,cAAAA,CAAee,SAAS,IAAI,IAAA,EAAM;QACpCC,MAAAA,CAAOC,cAAc,CAACJ,SAAAA,EAAW,WAAA,EAAa;AAC5CK,YAAAA,KAAAA,EAAOlB,eAAee,SAAS;YAC/BI,UAAAA,EAAY,IAAA;YACZC,QAAAA,EAAU,IAAA;YACVC,YAAAA,EAAc;AAChB,SAAA,CAAA;AACF,IAAA;IACA,OAAOR,SAAAA;AACT;;;;"}