graphql-dotnet / graphql-dotnet/authorization
Cannot use @include or @skip to strip unauthorized fields from a query
Open
enhancement
- Dominant language
- C#
- Stars
- 160
- Forks
- 38
- PR merge metrics
- No merged PRs in 30d
Description
Should `AuthorizeWith` report an error if a field the user isn't authorized for is excluded from the query via the `@include` or `@skip` directives? (It currently does.)
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.