Query Whitelisting / Persisted Queries

[StevenLangbroek]

So, beside CRUD permissions, another angle would be to allow clients to extract their queries and submit them to an endpoint, basically disallowing any other queries. The problem this prevents is people using your GraphQL API to basically crawl your content. I'm gathering examples + documentation on the matter, curious what your thoughts are.

[StevenLangbroek]

• ExpressJS middleware
• Talk about best practices
• Article by Apollo

[markhuot]

This is definitely something I'd like to support down the road. I think it's a bit too early to add it in today as the schema is still a bit in flux (directive support, mutation work, etc…). I'm also curious to see if persisted queries eventually make their way in to the GraphQL spec.

Long story short, I'd like to support it and see it on the roadmap but I'm not ready to commit to it today unless you have a compelling use case for it on a current project.

I updated the roadmap with a reference to this issue. I'm going to close this, for now. Feel free to re-open if you have an immediate need for this.

[mashema]

Hi Mark, wath is the timeframe, for implementing Persisted Queries

[mashema]

Apollo approche
Automatic Persisted Queries (APQ)
https://www.apollographql.com/docs/references/engine-proxy.html#automatic-persisted-queries