graphql-http 1.5.0 → 1.6.0

package/lib/audits/server.js

@@ -322,6 +322,17 @@ function serverAudits(opts) {
             });
             (0, utils_1.assert)('Status code', res.status).toBe(400);
         }),
+        (0, utils_1.audit)('SHOULD not contain the data entry on JSON parsing failure when accepting application/graphql-response+json', async () => {
+            const res = await fetchFn(opts.url, {
+                method: 'POST',
+                headers: {
+                    'content-type': 'application/json',
+                    accept: 'application/graphql-response+json',
+                },
+                body: '{ "not a JSON',
+            });
+            (0, utils_1.assert)('Data entry', (await res.json()).data).toBe(undefined);
+        }),
         (0, utils_1.audit)('MUST use 4xx or 5xx status codes if parameters are invalid when accepting application/graphql-response+json', async () => {
             const url = new URL(opts.url);
             url.searchParams.set('qeury' /* typo */, '{ __typename }');
@@ -341,6 +352,15 @@ function serverAudits(opts) {
             });
             (0, utils_1.assert)('Status code', res.status).toBe(400);
         }),
+        (0, utils_1.audit)('SHOULD not contain the data entry if parameters are invalid when accepting application/graphql-response+json', async () => {
+            const url = new URL(opts.url);
+            url.searchParams.set('qeury' /* typo */, '{ __typename }');
+            const res = await fetchFn(url.toString(), {
+                method: 'GET',
+                headers: { accept: 'application/graphql-response+json' },
+            });
+            (0, utils_1.assert)('Data entry', (await res.json()).data).toBe(undefined);
+        }),
         (0, utils_1.audit)('MUST use 4xx or 5xx status codes on document parsing failure when accepting application/graphql-response+json', async () => {
             const url = new URL(opts.url);
             url.searchParams.set('query', '{');
@@ -360,6 +380,15 @@ function serverAudits(opts) {
             });
             (0, utils_1.assert)('Status code', res.status).toBe(400);
         }),
+        (0, utils_1.audit)('SHOULD not contain the data entry on document parsing failure when accepting application/graphql-response+json', async () => {
+            const url = new URL(opts.url);
+            url.searchParams.set('query', '{');
+            const res = await fetchFn(url.toString(), {
+                method: 'GET',
+                headers: { accept: 'application/graphql-response+json' },
+            });
+            (0, utils_1.assert)('Data entry', (await res.json()).data).toBe(undefined);
+        }),
         (0, utils_1.audit)('MUST use 4xx or 5xx status codes on document validation failure when accepting application/graphql-response+json', async () => {
             const url = new URL(opts.url);
             url.searchParams.set('query', '{ 8f31403dfe404bccbb0e835f2629c6a7 }'); // making sure the field doesnt exist
@@ -379,6 +408,17 @@ function serverAudits(opts) {
             });
             (0, utils_1.assert)('Status code', res.status).toBe(400);
         }),
+        (0, utils_1.audit)('SHOULD not contain the data entry on document validation failure when accepting application/graphql-response+json', async () => {
+            const url = new URL(opts.url);
+            url.searchParams.set('query', '{ 8f31403dfe404bccbb0e835f2629c6a7 }'); // making sure the field doesnt exist
+            const res = await fetchFn(url.toString(), {
+                method: 'GET',
+                headers: { accept: 'application/graphql-response+json' },
+            });
+            (0, utils_1.assert)('Data entry', (await res.json()).data).toBe(undefined);
+        }),
+        // TODO: how to fail and have the data entry?
+        // audit('MUST use 2xx status code if response contains the data entry and it is not null when accepting application/graphql-response+json'),
         // TODO: how to make an unauthorized request?
         // https://graphql.github.io/graphql-over-http/draft/#sel-EANNNDTAAEVBAAqqc
         // audit('SHOULD use 401 or 403 status codes when the request is not permitted')

package/lib/audits/server.mjs

@@ -319,6 +319,17 @@ export function serverAudits(opts) {
             });
             assert('Status code', res.status).toBe(400);
         }),
+        audit('SHOULD not contain the data entry on JSON parsing failure when accepting application/graphql-response+json', async () => {
+            const res = await fetchFn(opts.url, {
+                method: 'POST',
+                headers: {
+                    'content-type': 'application/json',
+                    accept: 'application/graphql-response+json',
+                },
+                body: '{ "not a JSON',
+            });
+            assert('Data entry', (await res.json()).data).toBe(undefined);
+        }),
         audit('MUST use 4xx or 5xx status codes if parameters are invalid when accepting application/graphql-response+json', async () => {
             const url = new URL(opts.url);
             url.searchParams.set('qeury' /* typo */, '{ __typename }');
@@ -338,6 +349,15 @@ export function serverAudits(opts) {
             });
             assert('Status code', res.status).toBe(400);
         }),
+        audit('SHOULD not contain the data entry if parameters are invalid when accepting application/graphql-response+json', async () => {
+            const url = new URL(opts.url);
+            url.searchParams.set('qeury' /* typo */, '{ __typename }');
+            const res = await fetchFn(url.toString(), {
+                method: 'GET',
+                headers: { accept: 'application/graphql-response+json' },
+            });
+            assert('Data entry', (await res.json()).data).toBe(undefined);
+        }),
         audit('MUST use 4xx or 5xx status codes on document parsing failure when accepting application/graphql-response+json', async () => {
             const url = new URL(opts.url);
             url.searchParams.set('query', '{');
@@ -357,6 +377,15 @@ export function serverAudits(opts) {
             });
             assert('Status code', res.status).toBe(400);
         }),
+        audit('SHOULD not contain the data entry on document parsing failure when accepting application/graphql-response+json', async () => {
+            const url = new URL(opts.url);
+            url.searchParams.set('query', '{');
+            const res = await fetchFn(url.toString(), {
+                method: 'GET',
+                headers: { accept: 'application/graphql-response+json' },
+            });
+            assert('Data entry', (await res.json()).data).toBe(undefined);
+        }),
         audit('MUST use 4xx or 5xx status codes on document validation failure when accepting application/graphql-response+json', async () => {
             const url = new URL(opts.url);
             url.searchParams.set('query', '{ 8f31403dfe404bccbb0e835f2629c6a7 }'); // making sure the field doesnt exist
@@ -376,6 +405,17 @@ export function serverAudits(opts) {
             });
             assert('Status code', res.status).toBe(400);
         }),
+        audit('SHOULD not contain the data entry on document validation failure when accepting application/graphql-response+json', async () => {
+            const url = new URL(opts.url);
+            url.searchParams.set('query', '{ 8f31403dfe404bccbb0e835f2629c6a7 }'); // making sure the field doesnt exist
+            const res = await fetchFn(url.toString(), {
+                method: 'GET',
+                headers: { accept: 'application/graphql-response+json' },
+            });
+            assert('Data entry', (await res.json()).data).toBe(undefined);
+        }),
+        // TODO: how to fail and have the data entry?
+        // audit('MUST use 2xx status code if response contains the data entry and it is not null when accepting application/graphql-response+json'),
         // TODO: how to make an unauthorized request?
         // https://graphql.github.io/graphql-over-http/draft/#sel-EANNNDTAAEVBAAqqc
         // audit('SHOULD use 401 or 403 status codes when the request is not permitted')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "graphql-http",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "description": "Simple, pluggable, zero-dependency, GraphQL over HTTP Protocol compliant server and client",
   "keywords": [
     "graphql",
@@ -24,7 +24,7 @@
   "engines": {
     "node": ">=12"
   },
-  "packageManager": "yarn@3.2.2",
+  "packageManager": "yarn@3.2.3",
   "main": "lib/index.js",
   "module": "lib/index.mjs",
   "browser": "umd/graphql-http.js",
@@ -88,12 +88,15 @@
     "node-fetch": "^3.2.10",
     "prettier": "^2.7.1",
     "replacestream": "^4.0.3",
-    "rollup": "^2.78.1",
+    "rollup": "^2.79.0",
     "rollup-plugin-terser": "^7.0.2",
     "semantic-release": "^19.0.5",
     "tslib": "^2.4.0",
-    "typedoc": "^0.23.11",
-    "typedoc-plugin-markdown": "^3.13.4",
+    "typedoc": "^0.23.13",
+    "typedoc-plugin-markdown": "^3.13.5",
     "typescript": "^4.8.2"
+  },
+  "resolutions": {
+    "npm/libnpmversion": "^3.0.6"
   }
 }