graphql-http 2.0.5__tar.gz → 2.0.6__tar.gz

{graphql_http-2.0.5 → graphql_http-2.0.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: graphql_http
-Version: 2.0.5
+Version: 2.0.6
 Summary: HTTP Server for GraphQL.
 Author-email: Robert Parker <rob@parob.com>
 License: MIT

graphql_http-2.0.6/VERSION

@@ -0,0 +1 @@
+2.0.6

{graphql_http-2.0.5 → graphql_http-2.0.6}/graphql_http/server.py

@@ -494,16 +494,31 @@ class GraphQLHTTP:
                 def __init__(self):
                     super().__init__()
                     self.depth = 0
+                    self.in_operation = False
+
+                def enter_operation_definition(self, node, *_):
+                    # We're now inside an operation (query/mutation/subscription)
+                    self.in_operation = True
+
+                def leave_operation_definition(self, node, *_):
+                    # Leaving the operation
+                    self.in_operation = False
+
+                def enter_fragment_definition(self, node, *_):
+                    # Skip fragment definitions - they're not part of the actual query execution
+                    return False
 
                 def enter_selection_set(self, node, *_):
-                    self.depth += 1
+                    if self.in_operation:
+                        self.depth += 1
 
                 def leave_selection_set(self, node, *_):
-                    self.depth -= 1
+                    if self.in_operation:
+                        self.depth -= 1
 
                 def enter_field(self, node: FieldNode, *_):
-                    # Only collect fields at depth 1 (root level fields)
-                    if self.depth == 1 and hasattr(node, 'name') and hasattr(node.name, 'value'):
+                    # Only collect fields at depth 1 within actual operations
+                    if self.in_operation and self.depth == 1 and hasattr(node, 'name') and hasattr(node.name, 'value'):
                         root_field_names.add(node.name.value)
 
             visit(document, RootFieldCollector())

{graphql_http-2.0.5 → graphql_http-2.0.6}/graphql_http.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: graphql_http
-Version: 2.0.5
+Version: 2.0.6
 Summary: HTTP Server for GraphQL.
 Author-email: Robert Parker <rob@parob.com>
 License: MIT

{graphql_http-2.0.5 → graphql_http-2.0.6}/tests/test_auth.py

@@ -310,3 +310,44 @@ class TestGraphQLHTTPAuthentication:
         result = response.json()
         assert "errors" in result
         assert "Authorization header is missing" in result["errors"][0]["message"]
+
+    def test_full_introspection_query_with_auth_bypass(self, schema):
+        """Test that the standard full introspection query works with auth bypass.
+
+        This tests the large introspection query that GraphiQL and other tools use
+        to fetch the complete schema information.
+        """
+        from graphql import get_introspection_query
+
+        server = GraphQLHTTP(
+            schema=schema,
+            auth_enabled=True,
+            auth_bypass_during_introspection=True,
+            auth_jwks_uri="https://example.com/.well-known/jwks.json",
+            auth_issuer="https://example.com/",
+            auth_audience="test-audience"
+        )
+        client = server.client()
+
+        # Get the standard introspection query
+        introspection_query = get_introspection_query()
+
+        # This should work without authentication
+        response = client.post(
+            "/graphql",
+            json={"query": introspection_query}
+        )
+
+        assert response.status_code == 200
+        result = response.json()
+
+        # Should get valid introspection data, not an auth error
+        assert "errors" not in result or len(result["errors"]) == 0
+        assert "data" in result
+        assert "__schema" in result["data"]
+
+        # Verify we get expected introspection structure
+        schema_data = result["data"]["__schema"]
+        assert "queryType" in schema_data
+        assert "types" in schema_data
+        assert "directives" in schema_data

graphql_http-2.0.5/VERSION

@@ -1 +0,0 @@
-2.0.5