Level 3

AEM 6.5 | Persistent query updated with Graphql Introspection query

Forum|Forum|2 years ago
February 15, 2023
3 replies
2653 views

Hi,

I noticed that my persistent queries are getting updated with Graphql introspection query. Not sure what the reason could be but this is happening even with untouched old persistent queries as well. Wondering if anyone noticed a similar behavior and share if there is any way to avoid this issue. Thanks in advance.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

BrianKasingli

Community Advisor and Adobe Champion

It might be a possibility that you have clicked on the "save" button, or accidentally pressed CTRL + S

ChitraMadan

Community Advisor

Hi @mukeshaem,

By default any unauthenticated user can analyze GrapQL schema using Introspection. Introspection allows us to get information about all the Requests, Mutations, Subscriptions, and Data Types and all other things that are made available to the clients making requests. This information is easily available by requesting ___schema meta-field, which, according to the specification, is always available to the query of the “root” type.

You need to disable this feature, please refer to this article - https://lab.wallarm.com/why-and-how-to-disable-introspection-query-for-graphql-apis/

Thanks,

Chitra

M

MukeshAEMAuthor

Level 3

Thanks, @briankasingli @chitramadan for your responses. I'm wondering what might be the reason for this issue where actual queries are getting replaced with Introspection queries. We are creating the persistent queries locally using the postman web version and deploying it using packages. I have noticed this issue in my local as well as in higher environments like Dev and Stage.