Skip to content

Latest commit

 

History

History
26 lines (16 loc) · 729 Bytes

enforce_post.md

File metadata and controls

26 lines (16 loc) · 729 Bytes
Raw

Enforce POST

A rule that enforces the use of HTTP POST method when sending operations to the upstream GraphQL API.

The rule will block requests with non-POST HTTP methods only if the requests contain GraphQL operations. If no operation is found it will still forward the request to the upstream. This is useful for accessing GraphiQL for example through GraphQL Protect.

Configuration

enforce_post:
  # Enable the feature
  enable: true

Metrics

This rule produces metrics to help you gain insights into the behavior of the rule.

graphql_protect_enforce_post_count{}

No metrics are produced when the rule is disabled or never encounters operations through a non-POST request.