graphql-http 2.0.2__tar.gz → 2.0.3__tar.gz

{graphql_http-2.0.2 → graphql_http-2.0.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: graphql_http
-Version: 2.0.2
+Version: 2.0.3
 Summary: HTTP Server for GraphQL.
 Author-email: Robert Parker <rob@parob.com>
 License: MIT

graphql_http-2.0.3/VERSION

@@ -0,0 +1 @@
+2.0.3

{graphql_http-2.0.2 → graphql_http-2.0.3}/examples/auth_server.py

@@ -92,7 +92,7 @@ schema = GraphQLSchema(
                 resolve=get_public_info,
                 description="Public information available without authentication",
             ),
-            
+
             # Protected fields - require authentication
             "me": GraphQLField(
                 UserType,
@@ -120,20 +120,20 @@ def create_server_with_auth():
     jwks_uri = os.getenv("JWKS_URI", "https://your-auth0-domain.auth0.com/.well-known/jwks.json")
     issuer = os.getenv("JWT_ISSUER", "https://your-auth0-domain.auth0.com/")
     audience = os.getenv("JWT_AUDIENCE", "your-api-identifier")
-    
+
     return GraphQLHTTP(
         schema=schema,
         serve_graphiql=True,
         allow_cors=True,  # Enable CORS for web applications
         health_path="/health",  # Health check endpoint
-        
+
         # JWT Authentication configuration
         auth_enabled=True,
         auth_jwks_uri=jwks_uri,
         auth_issuer=issuer,
         auth_audience=audience,
-        auth_enabled_for_introspection=False,  # Allow introspection without auth
-        
+        auth_bypass_during_introspection=False,
+
         graphiql_default_query="""
 # Try these queries:
 
@@ -160,7 +160,7 @@ def create_server_with_auth():
 #     role
 #   }
 # }
-# 
+#
 # {
 #   users {
 #     id
@@ -204,7 +204,7 @@ def main():
     """Run the GraphQL server."""
     # Check if authentication should be enabled
     enable_auth = os.getenv("ENABLE_AUTH", "false").lower() == "true"
-    
+
     if enable_auth:
         print("Starting GraphQL server with JWT authentication...")
         server = create_server_with_auth()
@@ -220,12 +220,12 @@ def main():
         server = create_server_without_auth()
         print("\nAuthentication disabled for development!")
         print("Set ENABLE_AUTH=true to enable authentication")
-    
+
     print(f"\nEndpoints:")
     print(f"  GraphiQL: http://localhost:8000/graphql")
     print(f"  Health:   http://localhost:8000/health")
     print(f"  API:      http://localhost:8000/graphql")
-    
+
     # Run the server
     server.run(host="0.0.0.0", port=8000)
 

{graphql_http-2.0.2 → graphql_http-2.0.3}/graphql_http/server.py

@@ -94,7 +94,7 @@ class GraphQLHTTP:
         auth_issuer: Optional[str] = None,
         auth_audience: Optional[str] = None,
         auth_enabled: bool = False,
-        auth_enabled_for_introspection: bool = False,
+        auth_bypass_during_introspection: bool = True,
     ) -> None:
         """Initialize GraphQL HTTP server.
 
@@ -112,7 +112,7 @@ class GraphQLHTTP:
             auth_issuer: Expected JWT issuer
             auth_audience: Expected JWT audience
             auth_enabled: Whether to enable JWT authentication
-            auth_enabled_for_introspection: Whether auth is required for introspection
+            auth_bypass_during_introspection: Whether auth is required for introspection only queries
 
         Raises:
             ValueError: If invalid configuration is provided
@@ -142,7 +142,7 @@ class GraphQLHTTP:
         self.auth_issuer = auth_issuer
         self.auth_audience = auth_audience
         self.auth_enabled = auth_enabled
-        self.auth_enabled_for_introspection = auth_enabled_for_introspection
+        self.auth_bypass_during_introspection = auth_bypass_during_introspection
 
         if auth_jwks_uri:
             self.jwks_client = PyJWKClient(auth_jwks_uri)
@@ -325,8 +325,6 @@ class GraphQLHTTP:
         Returns:
             True if request is introspection-only
         """
-        if not self.auth_enabled or self.auth_enabled_for_introspection:
-            return False
 
         # Simple heuristic: if it contains introspection fields AND no regular fields
         query_data_lower = str(data).lower()
@@ -444,9 +442,7 @@ class GraphQLHTTP:
             # Handle authentication
             allow_only_introspection = False
             if self.auth_enabled:
-                allow_only_introspection = self._check_introspection_only(data)
-
-                if not allow_only_introspection:
+                if not self.auth_bypass_during_introspection or not self._check_introspection_only(data):
                     auth_error = self._authenticate_request(request)
                     if auth_error:
                         return auth_error

{graphql_http-2.0.2 → graphql_http-2.0.3}/graphql_http.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: graphql_http
-Version: 2.0.2
+Version: 2.0.3
 Summary: HTTP Server for GraphQL.
 Author-email: Robert Parker <rob@parob.com>
 License: MIT

{graphql_http-2.0.2 → graphql_http-2.0.3}/tests/test_auth.py

@@ -163,11 +163,11 @@ class TestGraphQLHTTPAuthentication:
         assert "Invalid token" in result["errors"][0]["message"]
 
     def test_introspection_without_auth_when_disabled(self, schema):
-        """Test introspection queries work without auth when auth_enabled_for_introspection=False."""
+        """Test introspection queries work without auth when auth_introspection_bypass=False."""
         server = GraphQLHTTP(
             schema=schema,
             auth_enabled=True,
-            auth_enabled_for_introspection=False,
+            auth_bypass_during_introspection=False,
             auth_jwks_uri="https://example.com/.well-known/jwks.json",
             auth_issuer="https://example.com/",
             auth_audience="test-audience"
@@ -179,18 +179,18 @@ class TestGraphQLHTTPAuthentication:
             "/graphql",
             json={"query": "{ __schema { queryType { name } } }"}
         )
-        assert response.status_code == 200
-        # Should get a valid introspection response, not an auth error
+        assert response.status_code == 401
+        result = response.json()
+        assert "errors" in result
+        assert "Authorization header is missing" in result["errors"][0]["message"]
 
-    @patch('graphql_http.server.PyJWKClient')
-    def test_introspection_with_auth_when_enabled(self, mock_jwks_client_class, schema):
-        """Test introspection queries require auth when auth_enabled_for_introspection=True."""
-        mock_jwks_client_class.return_value = MagicMock()
+    def test_introspection_with_auth_when_enabled(self, schema):
+        """Test introspection queries require auth when auth_introspection_bypass=True."""
 
         server = GraphQLHTTP(
             schema=schema,
             auth_enabled=True,
-            auth_enabled_for_introspection=True,
+            auth_bypass_during_introspection=True,
             auth_jwks_uri="https://example.com/.well-known/jwks.json",
             auth_issuer="https://example.com/",
             auth_audience="test-audience"
@@ -202,17 +202,15 @@ class TestGraphQLHTTPAuthentication:
             "/graphql",
             json={"query": "{ __schema { queryType { name } } }"}
         )
-        assert response.status_code == 401
-        result = response.json()
-        assert "errors" in result
-        assert "Authorization header is missing" in result["errors"][0]["message"]
+        assert response.status_code == 200
+        # Should get a valid introspection response, not an auth error
 
     def test_regular_query_requires_auth(self, schema):
         """Test that regular queries always require auth when auth is enabled."""
         server = GraphQLHTTP(
             schema=schema,
             auth_enabled=True,
-            auth_enabled_for_introspection=False,  # Only introspection is exempt
+            auth_bypass_during_introspection=False,  # Only introspection is exempt
             auth_jwks_uri="https://example.com/.well-known/jwks.json",
             auth_issuer="https://example.com/",
             auth_audience="test-audience"
@@ -274,7 +272,7 @@ class TestGraphQLHTTPAuthentication:
         server = GraphQLHTTP(
             schema=schema,
             auth_enabled=True,
-            auth_enabled_for_introspection=False,
+            auth_bypass_during_introspection=False,
             auth_jwks_uri="https://example.com/.well-known/jwks.json",
             auth_issuer="https://example.com/",
             auth_audience="test-audience"

graphql_http-2.0.2/VERSION

@@ -1 +0,0 @@
-2.0.2