Function graphql

src/routes/graphql.ts:53–351

(req, res)

}

export const graphql: Handler = async function (req, res) {
  const originalBody = await req.body.json<GraphQLRequest>()

  if (!originalBody.query) {
    return res.send(400, {
      error: 'Request has no "query" field.',
    })
  }

  const ignoreOriginCacheHeaders = IGNORE_ORIGIN_CACHE_HEADERS === '1'
  const authorizationHeader = req.headers.get(HTTPHeaders.authorization) || ''

  const defaultResponseHeaders: Record<string, string> = {
    [HTTPHeaders.contentType]: 'application/json',
    [HTTPHeaders.cacheControl]: 'public, no-cache, no-store',
    [HTTPHeaders.xCache]: CacheHitHeader.MISS,
    [HTTPHeaders.fgCache]: CacheHitHeader.MISS,
    [HTTPHeaders.fgOriginIgnoreCacheHeaders]: ignoreOriginCacheHeaders
      ? 'true'
      : 'false',
    [HTTPHeaders.xFrameOptions]: 'deny',
    [HTTPHeaders.xRobotsTag]: 'noindex',
    [HTTPHeaders.vary]: 'Accept-Encoding, Accept, X-Requested-With, Origin',

    [HTTPHeaders.contentSecurityPolicy]: `default-src 'none'`,
    [HTTPHeaders.strictTransportSecurity]:
      'max-age=31536000; includeSubdomains; preload',
  }

  let queryDocumentNode = null
  let hasPrivateTypes = false
  let isMutationRequest = false
  let authRequired = false
  let content = originalBody.query
  let inspectSchema = !!AUTH_DIRECTIVE || !!privateTypes

  try {
    queryDocumentNode = parse(originalBody.query, { noLocation: true })
    isMutationRequest = isMutation(queryDocumentNode)

    if (!isMutationRequest) {
      content = normalizeDocument(originalBody.query)

      if (inspectSchema) {
        const schema = await findSchema()
        if (schema && !graphQLSchema) {
          graphQLSchema = buildGraphQLSchema(schema)
        }

        if (graphQLSchema) {
          defaultResponseHeaders[HTTPHeaders.fgInspected] = 'true'
          if (AUTH_DIRECTIVE) {
            authRequired = requiresAuth(
              AUTH_DIRECTIVE,
              graphQLSchema,
              queryDocumentNode,
            )
          }