Function relay_graphql

crates/openshell-supervisor-network/src/l7/relay.rs:1192–1392

(
    config: &L7EndpointConfig,
    engine: &TunnelPolicyEngine,
    client: &mut C,
    upstream: &mut U,
    ctx: &L7EvalContext,
)

}

async fn relay_graphql<C, U>(
    config: &L7EndpointConfig,
    engine: &TunnelPolicyEngine,
    client: &mut C,
    upstream: &mut U,
    ctx: &L7EvalContext,
) -> Result<()>
where
    C: AsyncRead + AsyncWrite + Unpin + Send,
    U: AsyncRead + AsyncWrite + Unpin + Send,
{
    loop {
        if close_if_stale(engine.generation_guard(), ctx) {
            return Ok(());
        }

        let parsed = match crate::l7::graphql::parse_graphql_http_request(
            client,
            config.graphql_max_body_bytes,
            crate::l7::path::CanonicalizeOptions {
                allow_encoded_slash: config.allow_encoded_slash,
                ..Default::default()
            },
        )
        .await
        {
            Ok(Some(parsed)) => parsed,
            Ok(None) => return Ok(()),
            Err(e) => {
                if is_benign_connection_error(&e) {
                    debug!(
                        host = %ctx.host,
                        port = ctx.port,
                        error = %e,
                        "GraphQL L7 connection closed"
                    );
                } else {
                    let detail =
                        parse_rejection_detail(&e.to_string(), ParseRejectionMode::L7Endpoint);
                    emit_parse_rejection(ctx, &detail, "l7-graphql");
                }
                return Ok(());
            }
        };

        let req = parsed.request;
        let graphql_info = parsed.info;

        if deny_h2c_upgrade_if_requested(&req, config, ctx, client).await? {
            return Ok(());
        }

        if close_if_stale(engine.generation_guard(), ctx) {
            return Ok(());
        }

        let (eval_target, redacted_target) = if let Some(ref resolver) = ctx.secret_resolver {
            match secrets::rewrite_target_for_eval(&req.target, resolver) {