graphql-http 1.8.0 → 1.9.0

package/README.md

@@ -735,7 +735,6 @@ If you want a feature-full server with bleeding edge technologies, you're recomm
 | [hotchocolate](https://chillicream.com/docs/hotchocolate)          | [✅ Compliant](/implementations/hotchocolate/README.md)  |
 | [postgraphile](https://www.graphile.org/postgraphile/)             | [✅ Compliant](/implementations/postgraphile/README.md)  |
 | [apollo-server](https://www.apollographql.com/docs/apollo-server/) | [✅ Compliant](/implementations/apollo-server/README.md) |
-| [mercurius](https://mercurius.dev)                                 | [✅ Compliant](/implementations/mercurius/README.md)     |
 
 ## [Documentation](docs/)
 

package/lib/audits/server.d.mts

@@ -16,7 +16,7 @@ export interface ServerAuditOptions {
      * A function can be also supplied, in this case -
      * every audit will invoke the function to get the URL.
      */
-    url: string | (() => string | Promise<string>);
+    url: string | Promise<string> | (() => string | Promise<string>);
     /**
      * The Fetch function to use.
      *

package/lib/audits/server.d.ts

@@ -16,7 +16,7 @@ export interface ServerAuditOptions {
      * A function can be also supplied, in this case -
      * every audit will invoke the function to get the URL.
      */
-    url: string | (() => string | Promise<string>);
+    url: string | Promise<string> | (() => string | Promise<string>);
     /**
      * The Fetch function to use.
      *

package/lib/audits/server.js

@@ -313,6 +313,40 @@ function serverAudits(opts) {
             (0, utils_1.assert)('Status code', res.status).toBe(200);
             (0, utils_1.assert)('Execution result', await (0, utils_1.assertBodyAsExecutionResult)(res)).notToHaveProperty('errors');
         }),
+        ...['variables', 'operationName', 'extensions'].flatMap((parameter) => [
+            (0, utils_1.audit)(
+            // TODO: convert to MUST after watershed
+            `SHOULD allow null {${parameter}} parameter when accepting application/graphql-response+json`, async () => {
+                const res = await fetchFn(await getUrl(opts.url), {
+                    method: 'POST',
+                    headers: {
+                        'content-type': 'application/json',
+                        accept: 'application/graphql-response+json',
+                    },
+                    body: JSON.stringify({
+                        query: '{ __typename }',
+                        [parameter]: null,
+                    }),
+                });
+                (0, utils_1.assert)('Status code', res.status).toBe(200);
+                (0, utils_1.assert)('Execution result', await (0, utils_1.assertBodyAsExecutionResult)(res)).notToHaveProperty('errors');
+            }),
+            (0, utils_1.audit)(`MUST allow null {${parameter}} parameter when accepting application/json`, async () => {
+                const res = await fetchFn(await getUrl(opts.url), {
+                    method: 'POST',
+                    headers: {
+                        'content-type': 'application/json',
+                        accept: 'application/json',
+                    },
+                    body: JSON.stringify({
+                        query: '{ __typename }',
+                        [parameter]: null,
+                    }),
+                });
+                (0, utils_1.assert)('Status code', res.status).toBe(200);
+                (0, utils_1.assert)('Execution result', await (0, utils_1.assertBodyAsExecutionResult)(res)).notToHaveProperty('errors');
+            }),
+        ]),
         ...['string', 0, false, ['array']].map((invalid) => (0, utils_1.audit)(
         // TODO: convert to MUST after watershed
         `SHOULD use 400 status code on ${(0, utils_1.extendedTypeof)(invalid)} {variables} parameter when accepting application/graphql-response+json`, async () => {
@@ -694,8 +728,8 @@ async function auditServer(opts) {
 exports.auditServer = auditServer;
 /** @private */
 async function getUrl(url) {
-    if (typeof url === 'string') {
-        return url;
+    if (typeof url === 'function') {
+        return await url();
     }
-    return await url();
+    return url;
 }

package/lib/audits/server.mjs

@@ -310,6 +310,40 @@ export function serverAudits(opts) {
             assert('Status code', res.status).toBe(200);
             assert('Execution result', await assertBodyAsExecutionResult(res)).notToHaveProperty('errors');
         }),
+        ...['variables', 'operationName', 'extensions'].flatMap((parameter) => [
+            audit(
+            // TODO: convert to MUST after watershed
+            `SHOULD allow null {${parameter}} parameter when accepting application/graphql-response+json`, async () => {
+                const res = await fetchFn(await getUrl(opts.url), {
+                    method: 'POST',
+                    headers: {
+                        'content-type': 'application/json',
+                        accept: 'application/graphql-response+json',
+                    },
+                    body: JSON.stringify({
+                        query: '{ __typename }',
+                        [parameter]: null,
+                    }),
+                });
+                assert('Status code', res.status).toBe(200);
+                assert('Execution result', await assertBodyAsExecutionResult(res)).notToHaveProperty('errors');
+            }),
+            audit(`MUST allow null {${parameter}} parameter when accepting application/json`, async () => {
+                const res = await fetchFn(await getUrl(opts.url), {
+                    method: 'POST',
+                    headers: {
+                        'content-type': 'application/json',
+                        accept: 'application/json',
+                    },
+                    body: JSON.stringify({
+                        query: '{ __typename }',
+                        [parameter]: null,
+                    }),
+                });
+                assert('Status code', res.status).toBe(200);
+                assert('Execution result', await assertBodyAsExecutionResult(res)).notToHaveProperty('errors');
+            }),
+        ]),
         ...['string', 0, false, ['array']].map((invalid) => audit(
         // TODO: convert to MUST after watershed
         `SHOULD use 400 status code on ${extendedTypeof(invalid)} {variables} parameter when accepting application/graphql-response+json`, async () => {
@@ -689,8 +723,8 @@ export async function auditServer(opts) {
 }
 /** @private */
 async function getUrl(url) {
-    if (typeof url === 'string') {
-        return url;
+    if (typeof url === 'function') {
+        return await url();
     }
-    return await url();
+    return url;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "graphql-http",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "Simple, pluggable, zero-dependency, GraphQL over HTTP Protocol compliant server and client",
   "keywords": [
     "graphql",