graphql-http 1.3.0 → 1.6.0

package/lib/handler.js

@@ -55,7 +55,7 @@ exports.isResponse = isResponse;
  *       url: req.url,
  *       method: req.method,
  *       headers: req.headers,
- *       body: await new Promise((resolve) => {
+ *       body: () => new Promise((resolve) => {
  *         let body = '';
  *         req.on('data', (chunk) => (body += chunk));
  *         req.on('end', () => resolve(body));
@@ -142,16 +142,21 @@ function createHandler(options) {
                         if (!req.body) {
                             throw new Error('Missing body');
                         }
+                        let data;
                         try {
-                            const data = typeof req.body === 'string' ? JSON.parse(req.body) : req.body;
-                            partParams.operationName = data.operationName;
-                            partParams.query = data.query;
-                            partParams.variables = data.variables;
-                            partParams.extensions = data.extensions;
+                            const body = typeof req.body === 'function' ? await req.body() : req.body;
+                            data = typeof body === 'string' ? JSON.parse(body) : body;
                         }
-                        catch (_d) {
+                        catch (err) {
                             throw new Error('Unparsable JSON body');
                         }
+                        if (!(0, utils_1.isObject)(data)) {
+                            throw new Error('JSON body must be an object');
+                        }
+                        partParams.operationName = data.operationName;
+                        partParams.query = data.query;
+                        partParams.variables = data.variables;
+                        partParams.extensions = data.extensions;
                         break;
                     }
                 default: // graphql-http doesnt support any other content type
@@ -229,7 +234,7 @@ function createHandler(options) {
                 throw null;
             operation = ast.operation;
         }
-        catch (_e) {
+        catch (_d) {
             return makeResponse(new graphql_1.GraphQLError('Unable to detect operation AST'), acceptedMediaType);
         }
         if (operation === 'subscription') {

package/lib/handler.mjs

@@ -51,7 +51,7 @@ export function isResponse(val) {
  *       url: req.url,
  *       method: req.method,
  *       headers: req.headers,
- *       body: await new Promise((resolve) => {
+ *       body: () => new Promise((resolve) => {
  *         let body = '';
  *         req.on('data', (chunk) => (body += chunk));
  *         req.on('end', () => resolve(body));
@@ -138,16 +138,21 @@ export function createHandler(options) {
                         if (!req.body) {
                             throw new Error('Missing body');
                         }
+                        let data;
                         try {
-                            const data = typeof req.body === 'string' ? JSON.parse(req.body) : req.body;
-                            partParams.operationName = data.operationName;
-                            partParams.query = data.query;
-                            partParams.variables = data.variables;
-                            partParams.extensions = data.extensions;
+                            const body = typeof req.body === 'function' ? await req.body() : req.body;
+                            data = typeof body === 'string' ? JSON.parse(body) : body;
                         }
-                        catch (_d) {
+                        catch (err) {
                             throw new Error('Unparsable JSON body');
                         }
+                        if (!isObject(data)) {
+                            throw new Error('JSON body must be an object');
+                        }
+                        partParams.operationName = data.operationName;
+                        partParams.query = data.query;
+                        partParams.variables = data.variables;
+                        partParams.extensions = data.extensions;
                         break;
                     }
                 default: // graphql-http doesnt support any other content type
@@ -225,7 +230,7 @@ export function createHandler(options) {
                 throw null;
             operation = ast.operation;
         }
-        catch (_e) {
+        catch (_d) {
             return makeResponse(new GraphQLError('Unable to detect operation AST'), acceptedMediaType);
         }
         if (operation === 'subscription') {

package/lib/index.d.ts

@@ -1,3 +1,4 @@
 export * from './common';
 export * from './handler';
 export * from './client';
+export * from './audits';

package/lib/index.js

@@ -17,3 +17,4 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./common"), exports);
 __exportStar(require("./handler"), exports);
 __exportStar(require("./client"), exports);
+__exportStar(require("./audits"), exports);

package/lib/index.mjs

@@ -1,3 +1,4 @@
 export * from './common.mjs';
 export * from './handler.mjs';
 export * from './client.mjs';
+export * from './audits.mjs';

package/lib/utils.d.ts

@@ -5,7 +5,9 @@
  */
 import type { ExecutionResult, GraphQLError } from 'graphql';
 /** @private */
-export declare function isObject(val: unknown): val is Record<PropertyKey, unknown>;
+export declare function extendedTypeof(val: unknown): 'string' | 'number' | 'bigint' | 'boolean' | 'symbol' | 'undefined' | 'object' | 'function' | 'array' | 'null';
+/** @private */
+export declare function isObject(val: unknown): val is Record<PropertyKey, any>;
 /** @private */
 export declare function areGraphQLErrors(obj: unknown): obj is readonly GraphQLError[];
 /** @private */

package/lib/utils.js

@@ -5,7 +5,18 @@
  *
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isAsyncIterable = exports.isExecutionResult = exports.areGraphQLErrors = exports.isObject = void 0;
+exports.isAsyncIterable = exports.isExecutionResult = exports.areGraphQLErrors = exports.isObject = exports.extendedTypeof = void 0;
+/** @private */
+function extendedTypeof(val) {
+    if (val === null) {
+        return 'null';
+    }
+    if (Array.isArray(val)) {
+        return 'array';
+    }
+    return typeof val;
+}
+exports.extendedTypeof = extendedTypeof;
 /** @private */
 function isObject(val) {
     return typeof val === 'object' && val !== null;

package/lib/utils.mjs

@@ -4,6 +4,16 @@
  *
  */
 /** @private */
+export function extendedTypeof(val) {
+    if (val === null) {
+        return 'null';
+    }
+    if (Array.isArray(val)) {
+        return 'array';
+    }
+    return typeof val;
+}
+/** @private */
 export function isObject(val) {
     return typeof val === 'object' && val !== null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "graphql-http",
-  "version": "1.3.0",
+  "version": "1.6.0",
   "description": "Simple, pluggable, zero-dependency, GraphQL over HTTP Protocol compliant server and client",
   "keywords": [
     "graphql",
@@ -24,7 +24,7 @@
   "engines": {
     "node": ">=12"
   },
-  "packageManager": "yarn@3.2.2",
+  "packageManager": "yarn@3.2.3",
   "main": "lib/index.js",
   "module": "lib/index.mjs",
   "browser": "umd/graphql-http.js",
@@ -65,35 +65,38 @@
     "graphql": ">=0.11 <=16"
   },
   "devDependencies": {
-    "@babel/core": "^7.18.10",
+    "@babel/core": "^7.18.13",
     "@babel/plugin-proposal-class-properties": "^7.18.6",
     "@babel/plugin-proposal-nullish-coalescing-operator": "^7.18.6",
     "@babel/plugin-proposal-object-rest-spread": "^7.18.9",
     "@babel/plugin-proposal-optional-chaining": "^7.18.9",
     "@babel/preset-env": "^7.18.10",
     "@babel/preset-typescript": "^7.18.6",
-    "@rollup/plugin-typescript": "^8.3.4",
+    "@rollup/plugin-typescript": "^8.4.0",
     "@semantic-release/changelog": "^6.0.1",
     "@semantic-release/git": "^10.0.1",
-    "@types/jest": "^28.1.7",
-    "@typescript-eslint/eslint-plugin": "^5.33.1",
-    "@typescript-eslint/parser": "^5.33.1",
-    "babel-jest": "^28.1.3",
-    "eslint": "^8.22.0",
+    "@types/jest": "^29.0.0",
+    "@typescript-eslint/eslint-plugin": "^5.36.1",
+    "@typescript-eslint/parser": "^5.36.1",
+    "babel-jest": "^29.0.1",
+    "eslint": "^8.23.0",
     "eslint-config-prettier": "^8.5.0",
     "eslint-plugin-prettier": "^4.2.1",
-    "graphql": "^16.5.0",
-    "jest": "^28.1.3",
-    "jest-jasmine2": "^28.1.3",
+    "graphql": "^16.6.0",
+    "jest": "^29.0.1",
+    "jest-jasmine2": "^29.0.1",
     "node-fetch": "^3.2.10",
     "prettier": "^2.7.1",
     "replacestream": "^4.0.3",
-    "rollup": "^2.78.0",
+    "rollup": "^2.79.0",
     "rollup-plugin-terser": "^7.0.2",
-    "semantic-release": "^19.0.3",
+    "semantic-release": "^19.0.5",
     "tslib": "^2.4.0",
-    "typedoc": "^0.23.10",
-    "typedoc-plugin-markdown": "^3.13.4",
-    "typescript": "^4.7.4"
+    "typedoc": "^0.23.13",
+    "typedoc-plugin-markdown": "^3.13.5",
+    "typescript": "^4.8.2"
+  },
+  "resolutions": {
+    "npm/libnpmversion": "^3.0.6"
   }
 }