mirror of
https://github.com/hasura/graphql-engine.git
synced 2024-12-17 20:41:49 +03:00
5858752f42
https://github.com/hasura/graphql-engine-mono/pull/1902 Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Tirumarai Selvan <8663570+tirumaraiselvan@users.noreply.github.com> GitOrigin-RevId: a7b1c17f3aec035f3a2e4d968f10e544f5a50559
29 lines
897 B
ReStructuredText
29 lines
897 B
ReStructuredText
.. meta::
|
|
:description: Hasura Cloud disable GraphQL introspection
|
|
:keywords: hasura, docs, cloud, security, introspection, disable, GraphQL
|
|
|
|
.. _disable_graphql_introspection:
|
|
|
|
Disable GraphQL introspection
|
|
=============================
|
|
|
|
.. contents:: Table of contents
|
|
:backlinks: none
|
|
:depth: 1
|
|
:local:
|
|
|
|
Introduction
|
|
------------
|
|
|
|
The graphql-engine by default enables `GraphQL Schema Introspection <http://spec.graphql.org/June2018/#sec-Schema-Introspection>`__ which gives full information about the schema and may not be desired in production.
|
|
|
|
To avoid this, you can disable GraphQL introspection on a per-role basis.
|
|
|
|
Disabling GraphQL introspection for a role
|
|
------------------------------------------
|
|
|
|
Introspection can be disabled for a role as shown below:
|
|
|
|
.. thumbnail:: /img/graphql/cloud/security/disable-introspection.png
|
|
:alt: Hasura Cloud Console allow list tab
|