graphql-http 1.18.0 → 1.20.0

package/lib/handler.mjs

@@ -5,12 +5,8 @@
  */
 import { validate as graphqlValidate, specifiedRules, execute as graphqlExecute, parse as graphqlParse, getOperationAST as graphqlGetOperationAST, GraphQLError, } from 'graphql';
 import { areGraphQLErrors, isAsyncIterable, isExecutionResult, isGraphQLError, isObject, jsonErrorReplacer, } from './utils.mjs';
-/**
- * Checks whether the passed value is the `graphql-http` server agnostic response.
- *
- * @category Server
- */
-export function isResponse(val) {
+/** Checks whether the passed value is the `graphql-http` server agnostic response. */
+function isResponse(val) {
     // TODO: make sure the contents of init match ResponseInit
     return (Array.isArray(val) &&
         (typeof val[0] === 'string' || val[0] === null) &&
@@ -18,7 +14,7 @@ export function isResponse(val) {
 }
 /**
  * Makes a GraphQL over HTTP spec compliant server handler. The handler can
- * be used with your favourite server library.
+ * be used with your favorite server library.
  *
  * Beware that the handler resolves only after the whole operation completes.
  *
@@ -72,23 +68,32 @@ export function isResponse(val) {
  * @category Server
  */
 export function createHandler(options) {
-    const { schema, context, validate = graphqlValidate, validationRules = [], execute = graphqlExecute, parse = graphqlParse, getOperationAST = graphqlGetOperationAST, rootValue, onSubscribe, onOperation, formatError = (err) => err, } = options;
+    const { schema, context, validate = graphqlValidate, validationRules = [], execute = graphqlExecute, parse = graphqlParse, getOperationAST = graphqlGetOperationAST, rootValue, onSubscribe, onOperation, formatError = (err) => err, parseRequestParams = defaultParseRequestParams, } = options;
     return async function handler(req) {
-        var _a, _b;
-        const method = req.method;
-        if (method !== 'GET' && method !== 'POST') {
-            return [
-                null,
-                {
-                    status: 405,
-                    statusText: 'Method Not Allowed',
-                    headers: {
-                        allow: 'GET, POST',
-                    },
-                },
-            ];
+        let acceptedMediaType = null;
+        const accepts = (getHeader(req, 'accept') || '*/*')
+            .replace(/\s/g, '')
+            .toLowerCase()
+            .split(',');
+        for (const accept of accepts) {
+            // accept-charset became obsolete, shouldnt be used (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Accept-Charset)
+            // TODO: handle the weight parameter "q"
+            const [mediaType, ...params] = accept.split(';');
+            const charset = (params === null || params === void 0 ? void 0 : params.find((param) => param.includes('charset='))) || 'charset=utf8'; // utf-8 is assumed when not specified;
+            if (mediaType === 'application/graphql-response+json' &&
+                charset === 'charset=utf8') {
+                acceptedMediaType = 'application/graphql-response+json';
+                break;
+            }
+            // application/json should be the default until watershed
+            if ((mediaType === 'application/json' ||
+                mediaType === 'application/*' ||
+                mediaType === '*/*') &&
+                charset === 'charset=utf8') {
+                acceptedMediaType = 'application/json';
+                break;
+            }
         }
-        const acceptedMediaType = getAcceptableMediaType(getHeader(req, 'accept'));
         if (!acceptedMediaType) {
             return [
                 null,
@@ -101,89 +106,14 @@ export function createHandler(options) {
                 },
             ];
         }
-        // TODO: should graphql-http care about content-encoding? I'd say unzipping should happen before handler is reached
-        const [mediaType, charset = 'charset=utf-8', // utf-8 is assumed when not specified. this parameter is either "charset" or "boundary" (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Length)
-        ] = (getHeader(req, 'content-type') || '')
-            .replace(/\s/g, '')
-            .toLowerCase()
-            .split(';');
         let params;
         try {
-            const partParams = {};
-            switch (true) {
-                case method === 'GET': {
-                    // TODO: what if content-type is specified and is not application/x-www-form-urlencoded?
-                    try {
-                        const [, search] = req.url.split('?');
-                        const searchParams = new URLSearchParams(search);
-                        partParams.operationName =
-                            (_a = searchParams.get('operationName')) !== null && _a !== void 0 ? _a : undefined;
-                        partParams.query = (_b = searchParams.get('query')) !== null && _b !== void 0 ? _b : undefined;
-                        const variables = searchParams.get('variables');
-                        if (variables)
-                            partParams.variables = JSON.parse(variables);
-                        const extensions = searchParams.get('extensions');
-                        if (extensions)
-                            partParams.extensions = JSON.parse(extensions);
-                    }
-                    catch (_c) {
-                        throw new Error('Unparsable URL');
-                    }
-                    break;
-                }
-                case method === 'POST' &&
-                    mediaType === 'application/json' &&
-                    charset === 'charset=utf-8':
-                    {
-                        if (!req.body) {
-                            throw new Error('Missing body');
-                        }
-                        let data;
-                        try {
-                            const body = typeof req.body === 'function' ? await req.body() : req.body;
-                            data = typeof body === 'string' ? JSON.parse(body) : body;
-                        }
-                        catch (err) {
-                            throw new Error('Unparsable JSON body');
-                        }
-                        if (!isObject(data)) {
-                            throw new Error('JSON body must be an object');
-                        }
-                        partParams.operationName = data.operationName;
-                        partParams.query = data.query;
-                        partParams.variables = data.variables;
-                        partParams.extensions = data.extensions;
-                        break;
-                    }
-                default: // graphql-http doesnt support any other content type
-                    return [
-                        null,
-                        {
-                            status: 415,
-                            statusText: 'Unsupported Media Type',
-                        },
-                    ];
-            }
-            if (partParams.query == null)
-                throw new Error('Missing query');
-            if (typeof partParams.query !== 'string')
-                throw new Error('Invalid query');
-            if (partParams.variables != null &&
-                (typeof partParams.variables !== 'object' ||
-                    Array.isArray(partParams.variables))) {
-                throw new Error('Invalid variables');
-            }
-            if (partParams.operationName != null &&
-                typeof partParams.operationName !== 'string') {
-                throw new Error('Invalid operationName');
-            }
-            if (partParams.extensions != null &&
-                (typeof partParams.extensions !== 'object' ||
-                    Array.isArray(partParams.extensions))) {
-                throw new Error('Invalid extensions');
-            }
-            // request parameters are checked and now complete
-            params = partParams;
+            let paramsOrRes = await parseRequestParams(req);
+            if (!paramsOrRes)
+                paramsOrRes = await defaultParseRequestParams(req);
+            if (isResponse(paramsOrRes))
+                return paramsOrRes;
+            params = paramsOrRes;
         }
         catch (err) {
             return makeResponse(err, acceptedMediaType, formatError);
@@ -245,7 +175,7 @@ export function createHandler(options) {
                 throw null;
             operation = ast.operation;
         }
-        catch (_d) {
+        catch (_a) {
             return makeResponse(new GraphQLError('Unable to detect operation AST'), acceptedMediaType, formatError);
         }
         if (operation === 'subscription') {
@@ -253,7 +183,7 @@ export function createHandler(options) {
         }
         // mutations cannot happen over GETs
         // https://graphql.github.io/graphql-over-http/draft/#sel-CALFJRPAAELBAAxwP
-        if (operation === 'mutation' && method === 'GET') {
+        if (operation === 'mutation' && req.method === 'GET') {
             return [
                 JSON.stringify({
                     errors: [new GraphQLError('Cannot perform mutations over GET')],
@@ -289,36 +219,108 @@ export function createHandler(options) {
     };
 }
 /**
- * Inspects the request and detects the appropriate/acceptable Media-Type
- * looking at the `Accept` header while complying with the GraphQL over HTTP spec.
+ * The default request params parser. Used when no custom one is provided or if it
+ * returns nothing.
  *
- * @category Server
+ * Read more about it in {@link ParseRequestParams}.
+ *
+ * TODO: should graphql-http itself care about content-encoding? I'd say unzipping should happen before handler is reached
  */
-export function getAcceptableMediaType(acceptHeader) {
-    let acceptedMediaType = null;
-    const accepts = (acceptHeader || '*/*')
+async function defaultParseRequestParams(req) {
+    var _a, _b;
+    const method = req.method;
+    if (method !== 'GET' && method !== 'POST') {
+        return [
+            null,
+            {
+                status: 405,
+                statusText: 'Method Not Allowed',
+                headers: {
+                    allow: 'GET, POST',
+                },
+            },
+        ];
+    }
+    const [mediaType, charset = 'charset=utf-8', // utf-8 is assumed when not specified. this parameter is either "charset" or "boundary" (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Length)
+    ] = (getHeader(req, 'content-type') || '')
         .replace(/\s/g, '')
         .toLowerCase()
-        .split(',');
-    for (const accept of accepts) {
-        // accept-charset became obsolete, shouldnt be used (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Accept-Charset)
-        // TODO: handle the weight parameter "q"
-        const [mediaType, ...params] = accept.split(';');
-        const charset = (params === null || params === void 0 ? void 0 : params.find((param) => param.includes('charset='))) || 'charset=utf8'; // utf-8 is assumed when not specified;
-        if (mediaType === 'application/graphql-response+json' &&
-            charset === 'charset=utf8') {
-            acceptedMediaType = 'application/graphql-response+json';
-            break;
-        }
-        if ((mediaType === 'application/json' ||
-            mediaType === 'application/*' ||
-            mediaType === '*/*') &&
-            charset === 'charset=utf8') {
-            acceptedMediaType = 'application/json';
+        .split(';');
+    const partParams = {};
+    switch (true) {
+        case method === 'GET': {
+            // TODO: what if content-type is specified and is not application/x-www-form-urlencoded?
+            try {
+                const [, search] = req.url.split('?');
+                const searchParams = new URLSearchParams(search);
+                partParams.operationName =
+                    (_a = searchParams.get('operationName')) !== null && _a !== void 0 ? _a : undefined;
+                partParams.query = (_b = searchParams.get('query')) !== null && _b !== void 0 ? _b : undefined;
+                const variables = searchParams.get('variables');
+                if (variables)
+                    partParams.variables = JSON.parse(variables);
+                const extensions = searchParams.get('extensions');
+                if (extensions)
+                    partParams.extensions = JSON.parse(extensions);
+            }
+            catch (_c) {
+                throw new Error('Unparsable URL');
+            }
             break;
         }
+        case method === 'POST' &&
+            mediaType === 'application/json' &&
+            charset === 'charset=utf-8':
+            {
+                if (!req.body) {
+                    throw new Error('Missing body');
+                }
+                let data;
+                try {
+                    const body = typeof req.body === 'function' ? await req.body() : req.body;
+                    data = typeof body === 'string' ? JSON.parse(body) : body;
+                }
+                catch (err) {
+                    throw new Error('Unparsable JSON body');
+                }
+                if (!isObject(data)) {
+                    throw new Error('JSON body must be an object');
+                }
+                partParams.operationName = data.operationName;
+                partParams.query = data.query;
+                partParams.variables = data.variables;
+                partParams.extensions = data.extensions;
+                break;
+            }
+        default: // graphql-http doesnt support any other content type
+            return [
+                null,
+                {
+                    status: 415,
+                    statusText: 'Unsupported Media Type',
+                },
+            ];
+    }
+    if (partParams.query == null)
+        throw new Error('Missing query');
+    if (typeof partParams.query !== 'string')
+        throw new Error('Invalid query');
+    if (partParams.variables != null &&
+        (typeof partParams.variables !== 'object' ||
+            Array.isArray(partParams.variables))) {
+        throw new Error('Invalid variables');
+    }
+    if (partParams.operationName != null &&
+        typeof partParams.operationName !== 'string') {
+        throw new Error('Invalid operationName');
     }
-    return acceptedMediaType;
+    if (partParams.extensions != null &&
+        (typeof partParams.extensions !== 'object' ||
+            Array.isArray(partParams.extensions))) {
+        throw new Error('Invalid extensions');
+    }
+    // request parameters are checked and now complete
+    return partParams;
 }
 /**
  * Creates an appropriate GraphQL over HTTP response following the provided arguments.
@@ -330,10 +332,8 @@ export function getAcceptableMediaType(acceptHeader) {
  *
  * If the first argument is an `Error`, the operation will be treated as a bad request responding with `400: Bad Request` and the
  * error will be present in the `ExecutionResult` style.
- *
- * @category Server
  */
-export function makeResponse(resultOrErrors, acceptedMediaType, formatError) {
+function makeResponse(resultOrErrors, acceptedMediaType, formatError) {
     if (resultOrErrors instanceof Error &&
         // because GraphQLError extends the Error class
         !isGraphQLError(resultOrErrors)) {

package/lib/use/express.js

@@ -21,7 +21,6 @@ const handler_1 = require("../handler");
  * @category Server/express
  */
 function createHandler(options) {
-    const isProd = process.env.NODE_ENV === 'production';
     const handle = (0, handler_1.createHandler)(options);
     return async function requestListener(req, res) {
         try {
@@ -50,23 +49,7 @@ function createHandler(options) {
             // If you wish to handle them differently, consider implementing your own request handler.
             console.error('Internal error occurred during request handling. ' +
                 'Please check your implementation.', err);
-            if (isProd) {
-                res.writeHead(500).end();
-            }
-            else {
-                res
-                    .writeHead(500, { 'content-type': 'application/json; charset=utf-8' })
-                    .end(JSON.stringify({
-                    errors: [
-                        err instanceof Error
-                            ? {
-                                message: err.message,
-                                stack: err.stack,
-                            }
-                            : err,
-                    ],
-                }));
-            }
+            res.writeHead(500).end();
         }
     };
 }

package/lib/use/express.mjs

@@ -18,7 +18,6 @@ import { createHandler as createRawHandler, } from '../handler.mjs';
  * @category Server/express
  */
 export function createHandler(options) {
-    const isProd = process.env.NODE_ENV === 'production';
     const handle = createRawHandler(options);
     return async function requestListener(req, res) {
         try {
@@ -47,23 +46,7 @@ export function createHandler(options) {
             // If you wish to handle them differently, consider implementing your own request handler.
             console.error('Internal error occurred during request handling. ' +
                 'Please check your implementation.', err);
-            if (isProd) {
-                res.writeHead(500).end();
-            }
-            else {
-                res
-                    .writeHead(500, { 'content-type': 'application/json; charset=utf-8' })
-                    .end(JSON.stringify({
-                    errors: [
-                        err instanceof Error
-                            ? {
-                                message: err.message,
-                                stack: err.stack,
-                            }
-                            : err,
-                    ],
-                }));
-            }
+            res.writeHead(500).end();
         }
     };
 }

package/lib/use/fastify.js

@@ -21,7 +21,6 @@ const handler_1 = require("../handler");
  * @category Server/fastify
  */
 function createHandler(options) {
-    const isProd = process.env.NODE_ENV === 'production';
     const handle = (0, handler_1.createHandler)(options);
     return async function requestListener(req, reply) {
         try {
@@ -45,24 +44,7 @@ function createHandler(options) {
             // If you wish to handle them differently, consider implementing your own request handler.
             console.error('Internal error occurred during request handling. ' +
                 'Please check your implementation.', err);
-            if (isProd) {
-                reply.status(500).send();
-            }
-            else {
-                reply
-                    .status(500)
-                    .header('content-type', 'application/json; charset=utf-8')
-                    .send({
-                    errors: [
-                        err instanceof Error
-                            ? {
-                                message: err.message,
-                                stack: err.stack,
-                            }
-                            : err,
-                    ],
-                });
-            }
+            reply.status(500).send();
         }
     };
 }

package/lib/use/fastify.mjs

@@ -18,7 +18,6 @@ import { createHandler as createRawHandler, } from '../handler.mjs';
  * @category Server/fastify
  */
 export function createHandler(options) {
-    const isProd = process.env.NODE_ENV === 'production';
     const handle = createRawHandler(options);
     return async function requestListener(req, reply) {
         try {
@@ -42,24 +41,7 @@ export function createHandler(options) {
             // If you wish to handle them differently, consider implementing your own request handler.
             console.error('Internal error occurred during request handling. ' +
                 'Please check your implementation.', err);
-            if (isProd) {
-                reply.status(500).send();
-            }
-            else {
-                reply
-                    .status(500)
-                    .header('content-type', 'application/json; charset=utf-8')
-                    .send({
-                    errors: [
-                        err instanceof Error
-                            ? {
-                                message: err.message,
-                                stack: err.stack,
-                            }
-                            : err,
-                    ],
-                });
-            }
+            reply.status(500).send();
         }
     };
 }

package/lib/use/fetch.d.mts

@@ -26,7 +26,7 @@ export type HandlerOptions<Context extends OperationContext = undefined> = RawHa
  * import http from 'http';
  * import { createServerAdapter } from '@whatwg-node/server'; // yarn add @whatwg-node/server
  * import { createHandler } from 'graphql-http/lib/use/fetch';
- * import { schema } from './my-graphql-step/index.mjs';
+ * import { schema } from './my-graphql-schema/index.mjs';
  *
  * // Use this adapter in _any_ environment.
  * const adapter = createServerAdapter({

package/lib/use/fetch.d.ts

@@ -26,7 +26,7 @@ export type HandlerOptions<Context extends OperationContext = undefined> = RawHa
  * import http from 'http';
  * import { createServerAdapter } from '@whatwg-node/server'; // yarn add @whatwg-node/server
  * import { createHandler } from 'graphql-http/lib/use/fetch';
- * import { schema } from './my-graphql-step';
+ * import { schema } from './my-graphql-schema';
  *
  * // Use this adapter in _any_ environment.
  * const adapter = createServerAdapter({

package/lib/use/fetch.js

@@ -13,7 +13,7 @@ const handler_1 = require("../handler");
  * import http from 'http';
  * import { createServerAdapter } from '@whatwg-node/server'; // yarn add @whatwg-node/server
  * import { createHandler } from 'graphql-http/lib/use/fetch';
- * import { schema } from './my-graphql-step';
+ * import { schema } from './my-graphql-schema';
  *
  * // Use this adapter in _any_ environment.
  * const adapter = createServerAdapter({
@@ -31,7 +31,6 @@ const handler_1 = require("../handler");
  * @category Server/fetch
  */
 function createHandler(options, reqCtx = {}) {
-    const isProd = process.env.NODE_ENV === 'production';
     const api = {
         Response: reqCtx.Response || Response,
         TextEncoder: reqCtx.TextEncoder || TextEncoder,
@@ -55,26 +54,7 @@ function createHandler(options, reqCtx = {}) {
             // If you wish to handle them differently, consider implementing your own request handler.
             console.error('Internal error occurred during request handling. ' +
                 'Please check your implementation.', err);
-            if (isProd) {
-                return new api.Response(null, { status: 500 });
-            }
-            else {
-                return new api.Response(JSON.stringify({
-                    errors: [
-                        err instanceof Error
-                            ? {
-                                message: err.message,
-                                stack: err.stack,
-                            }
-                            : err,
-                    ],
-                }), {
-                    status: 500,
-                    headers: {
-                        'content-type': 'application/json; charset=utf-8',
-                    },
-                });
-            }
+            return new api.Response(null, { status: 500 });
         }
     };
 }

package/lib/use/fetch.mjs

@@ -10,7 +10,7 @@ import { createHandler as createRawHandler, } from '../handler.mjs';
  * import http from 'http';
  * import { createServerAdapter } from '@whatwg-node/server'; // yarn add @whatwg-node/server
  * import { createHandler } from 'graphql-http/lib/use/fetch';
- * import { schema } from './my-graphql-step/index.mjs';
+ * import { schema } from './my-graphql-schema/index.mjs';
  *
  * // Use this adapter in _any_ environment.
  * const adapter = createServerAdapter({
@@ -28,7 +28,6 @@ import { createHandler as createRawHandler, } from '../handler.mjs';
  * @category Server/fetch
  */
 export function createHandler(options, reqCtx = {}) {
-    const isProd = process.env.NODE_ENV === 'production';
     const api = {
         Response: reqCtx.Response || Response,
         TextEncoder: reqCtx.TextEncoder || TextEncoder,
@@ -52,26 +51,7 @@ export function createHandler(options, reqCtx = {}) {
             // If you wish to handle them differently, consider implementing your own request handler.
             console.error('Internal error occurred during request handling. ' +
                 'Please check your implementation.', err);
-            if (isProd) {
-                return new api.Response(null, { status: 500 });
-            }
-            else {
-                return new api.Response(JSON.stringify({
-                    errors: [
-                        err instanceof Error
-                            ? {
-                                message: err.message,
-                                stack: err.stack,
-                            }
-                            : err,
-                    ],
-                }), {
-                    status: 500,
-                    headers: {
-                        'content-type': 'application/json; charset=utf-8',
-                    },
-                });
-            }
+            return new api.Response(null, { status: 500 });
         }
     };
 }

package/lib/use/http.d.mts

@@ -22,7 +22,7 @@ export type HandlerOptions<Context extends OperationContext = undefined> = RawHa
  * ```js
  * import http from 'http';
  * import { createHandler } from 'graphql-http/lib/use/http';
- * import { schema } from './my-graphql-step/index.mjs';
+ * import { schema } from './my-graphql-schema/index.mjs';
  *
  * const server = http.createServer(createHandler({ schema }));
  *

package/lib/use/http.d.ts

@@ -22,7 +22,7 @@ export type HandlerOptions<Context extends OperationContext = undefined> = RawHa
  * ```js
  * import http from 'http';
  * import { createHandler } from 'graphql-http/lib/use/http';
- * import { schema } from './my-graphql-step';
+ * import { schema } from './my-graphql-schema';
  *
  * const server = http.createServer(createHandler({ schema }));
  *

package/lib/use/http.js

@@ -9,7 +9,7 @@ const handler_1 = require("../handler");
  * ```js
  * import http from 'http';
  * import { createHandler } from 'graphql-http/lib/use/http';
- * import { schema } from './my-graphql-step';
+ * import { schema } from './my-graphql-schema';
  *
  * const server = http.createServer(createHandler({ schema }));
  *
@@ -20,7 +20,6 @@ const handler_1 = require("../handler");
  * @category Server/http
  */
 function createHandler(options) {
-    const isProd = process.env.NODE_ENV === 'production';
     const handle = (0, handler_1.createHandler)(options);
     return async function requestListener(req, res) {
         try {
@@ -49,23 +48,7 @@ function createHandler(options) {
             // If you wish to handle them differently, consider implementing your own request handler.
             console.error('Internal error occurred during request handling. ' +
                 'Please check your implementation.', err);
-            if (isProd) {
-                res.writeHead(500).end();
-            }
-            else {
-                res
-                    .writeHead(500, { 'content-type': 'application/json; charset=utf-8' })
-                    .end(JSON.stringify({
-                    errors: [
-                        err instanceof Error
-                            ? {
-                                message: err.message,
-                                stack: err.stack,
-                            }
-                            : err,
-                    ],
-                }));
-            }
+            res.writeHead(500).end();
         }
     };
 }