
EtienneandGitHub
71724de7dd
Security - disable gql introspection for non-auth user (#16047)
closes https://github.com/twentyhq/private-issues/issues/351
closes https://github.com/twentyhq/private-issues/issues/350
Before, introspection query works without token. After, fails.
```
query IntrospectionQuery {
__schema {
queryType {
name
}
mutationType {
name
}
subscriptionType {
name
}
types {
...FullType
}
directives {
name
description
locations
args {
...InputValue
}
}
}
}
fragment FullType on __Type {
kind
name
description
fields(includeDeprecated: true) {
name
description
args {
...InputValue
}
type {
...TypeRef
}
isDeprecated
deprecationReason
}
inputFields {
...InputValue
}
interfaces {
...TypeRef
}
enumValues(includeDeprecated: true) {
name
description
isDeprecated
deprecationReason
}
possibleTypes {
...TypeRef
}
}
fragment InputValue on __InputValue {
name
description
type {
...TypeRef
}
defaultValue
}
fragment TypeRef on __Type {
kind
name
ofType {
kind
name
ofType {
kind
name
ofType {
kind
name
ofType {
kind
name
ofType {
kind
name
ofType {
kind
name
ofType {
kind
name
}
}
}
}
}
}
}
}
```
2025-11-25 15:39:29 +01:00
..
2025-11-25 14:28:37 +01:00
2025-11-24 15:49:58 +00:00
2025-11-16 18:20:06 +01:00
2025-11-25 15:20:59 +01:00
2025-11-17 08:16:56 +01:00
2025-11-24 11:21:30 +01:00
2025-11-25 15:31:25 +01:00
2025-11-21 14:28:15 +00:00
2025-11-25 15:39:29 +01:00
2025-11-25 12:10:14 +01:00
2025-11-24 16:44:28 +00:00
2025-11-18 16:51:12 +01:00
2025-11-03 11:42:28 +01:00