Configuring HTTP Allowed Methods on Gateway

[curtis-thompson]

Hello,

I'm trying to configure our GraphQL Mesh Gateway so that the endpoint only accepts POST requests and rejects any other request with a different HTTP method. I have looked in the API documentation for this but I couldn't find anything we can use to do this.

Is there a way of configuring a list of allowed HTTP methods that is allowed on our mesh gateway?

Many thanks

[ardatan]

You can write a custom plugin (Mesh uses GraphQL Yoga so you can use GraphQL Yoga hooks -> https://the-guild.dev/graphql/yoga-server/docs/features/envelop-plugins#onrequest);

import { MeshPlugin } from '@graphql-mesh/types';

const allowPOSTOnly: MeshPlugin = {
   onRequest({ request, fetchAPI, endResponse }) {
     if (request.method !== 'POST') {
        endResponse(
          new fetchAPI.Response(null, { status: 405, statusText: 'Method Not Allowed' })
     }
   }
}

const plugins = [allowPOSTOnly];

export default plugins];

Then pass it as an additional plugin; https://the-guild.dev/graphql/mesh/docs/plugins/plugins-introduction#additional-plugins

additionalEnvelopPlugins: "./custom-plugins"

[curtis-thompson]

Thank you for this, I've got an implementation working using a plugin so this has solved my problem :)

I have another question. We have an introspection query (_sdl) that I am trying to disable be default. I have tried to use the useDisableIntrospection plugin but that is not disabling this specific query. Is the best way to intercept the request using this onRequest plugin and scan the request body for the _sdl or is there a better way of doing this?

Many thanks

[ardatan]

You can use the filter transform to remove that field from the final schema;
https://the-guild.dev/graphql/mesh/docs/transforms/filter-schema

[curtis-thompson]

Excellent that's much cleaner, thank you :)