diff options
| author | John Estabrook <jestabro@vyos.io> | 2022-05-15 13:29:29 -0500 |
|---|---|---|
| committer | John Estabrook <jestabro@vyos.io> | 2022-07-24 08:44:58 -0500 |
| commit | b882e997e18c0d63aa7a4507df9b71c81c1970d1 (patch) | |
| tree | 0cc2f075a1b8728e144eb13b999ae25cac98fdd3 /src/services/vyos-http-api-server | |
| parent | 02beb3ead3783ce18087c897c4871786449c6bd1 (diff) | |
| download | vyos-1x-b882e997e18c0d63aa7a4507df9b71c81c1970d1.tar.gz vyos-1x-b882e997e18c0d63aa7a4507df9b71c81c1970d1.zip | |
graphql: T3993: disable introspection unless set in CLI
Diffstat (limited to 'src/services/vyos-http-api-server')
| -rwxr-xr-x | src/services/vyos-http-api-server | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/src/services/vyos-http-api-server b/src/services/vyos-http-api-server index e9b904ba8..af8837e1e 100755 --- a/src/services/vyos-http-api-server +++ b/src/services/vyos-http-api-server @@ -654,11 +654,13 @@ def graphql_init(fast_api_app): schema = generate_schema() + in_spec = app.state.vyos_introspection + if app.state.vyos_origins: origins = app.state.vyos_origins - app.add_route('/graphql', CORSMiddleware(GraphQL(schema, debug=True), allow_origins=origins, allow_methods=("GET", "POST", "OPTIONS"))) + app.add_route('/graphql', CORSMiddleware(GraphQL(schema, debug=True, introspection=in_spec), allow_origins=origins, allow_methods=("GET", "POST", "OPTIONS"))) else: - app.add_route('/graphql', GraphQL(schema, debug=True)) + app.add_route('/graphql', GraphQL(schema, debug=True, introspection=in_spec)) ### @@ -684,6 +686,7 @@ if __name__ == '__main__': app.state.vyos_debug = server_config['debug'] app.state.vyos_gql = server_config['gql'] + app.state.vyos_introspection = server_config['introspection'] app.state.vyos_strict = server_config['strict'] app.state.vyos_origins = server_config.get('cors', {}).get('origins', []) |