Increase default body-parser limit for standalone server

.changeset/stale-ligers-impress.md

@@ -0,0 +1,5 @@
+---
+'@apollo/server': patch
+---
+
+Restore body-parser limit of standalone server to 50mb (as it was in the `apollo-server` package)

packages/server/src/__tests__/standalone/standaloneSpecific.test.ts

@@ -1,6 +1,6 @@
 import { ApolloServer } from '../..';
 import { startStandaloneServer } from '../../standalone';
-import { describe, it } from '@jest/globals';
+import { describe, it, expect } from '@jest/globals';
 
 describe('Typings: TContext inference', () => {
   it('correctly infers BaseContext when no `context` function is provided', async () => {
@@ -103,3 +103,41 @@ describe('Typings: TContext inference', () => {
     await server.stop();
   });
 });
+
+describe('Configuration', () => {
+  it('allows > 100KiB bodies to be sent (body-parser default)', async () => {
+    const server = new ApolloServer({
+      typeDefs: `type Query { hello: String }`,
+      resolvers: {
+        Query: {
+          hello: () => 'hello world!',
+        },
+      },
+    });
+
+    const { url } = await startStandaloneServer(server, {
+      listen: { port: 0 },
+    });
+
+    const excessivelyLargeBody = JSON.stringify({
+      query: `{hello}`,
+      variables: Object.fromEntries([...Array(7960)].map((_, i) => [i, 'foo'])),
+    });
+
+    // 100kib limit = 102400 bytes
+    expect(Buffer.byteLength(excessivelyLargeBody)).toBe(102403);
+
+    const result = await fetch(url, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+      },
+      body: excessivelyLargeBody,
+    });
+    const { data } = await result.json();
+
+    expect(data.hello).toEqual('hello world!');
+
+    await server.stop();
+  });
+});

packages/server/src/standalone/index.ts

@@ -56,7 +56,11 @@ export async function startStandaloneServer<TContext extends BaseContext>(
   await server.start();
 
   const context = options?.context ?? (async () => ({} as TContext));
-  app.use(cors(), bodyParser.json(), expressMiddleware(server, { context }));
+  app.use(
+    cors(),
+    bodyParser.json({ limit: '50mb' }),
+    expressMiddleware(server, { context }),
+  );
 
   const listenOptions = options?.listen ?? { port: 4000 };
   // Wait for server to start listening