amplication / amplication/amplication
Enable GraphQL Playground and introspection on Plugin API and other services
- Dominant language
- TypeScript
- Stars
- 16k
- Forks
- 1.5k
- PR merge metrics
- No merged PRs in 30d
Description
### Feature description
Currently, our services do not enable the graphql playground and instrospection on the different services.
It is a common security best practice to disable the playground and introspection features on API, but since our API is public and its code is open-source - we do not actually reveal anything new by enabling introspections and playground.
see this for more opinions about this dilemma
https://www.apollographql.com/blog/why-you-should-disable-graphql-introspection-in-production
We can also consider enabling just the introspection and use tools like this for the playground
https://studio.apollographql.com/sandbox/explorer
if for any reason, we prefer not to enable the introspection on prod, we can consider doing it on staging or sandbox
### Use case
while working on clients for the API, it is very helpful to be able to build and test to queries on the playground
### Are you willing to submit PR?
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.