amplication / amplication/amplication

Enable GraphQL Playground and introspection on Plugin API and other services

Open
#7,955 1 comment 0 reactions 1 assignee Assigned to @levivannoort View on GitHub
type: feature request
Dominant language
TypeScript
Stars
16k
Forks
1.5k
PR merge metrics
No merged PRs in 30d

Description

### Feature description

Currently, our services do not enable the graphql playground and instrospection on the different services.
It is a common security best practice to disable the playground and introspection features on API, but since our API is public and its code is open-source - we do not actually reveal anything new by enabling introspections and playground.

see this for more opinions about this dilemma
https://www.apollographql.com/blog/why-you-should-disable-graphql-introspection-in-production

We can also consider enabling just the introspection and use tools like this for the playground
https://studio.apollographql.com/sandbox/explorer

if for any reason, we prefer not to enable the introspection on prod, we can consider doing it on staging or sandbox

### Use case

while working on clients for the API, it is very helpful to be able to build and test to queries on the playground

### Are you willing to submit PR?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.