Skip to content

Conversation

@ramlino
Copy link

@ramlino ramlino commented Jun 30, 2025

…ery limiting

  • Add GraphQL Armor integration to GraphqlExpress infrastructure
  • Implement alias query blocking with maxAliases: 0 by default
  • Add query complexity limits (maxDepth, maxCost, maxDirectives, maxArguments)
  • Integrate logger for security violation logging
  • Add comprehensive test suite for GraphQL Armor features
  • Update README with Armor configuration examples
  • Add test scripts for running Armor-specific tests
  • Fix logger integration in Armor error handling

Security Features:

  • Disable GraphQL aliases completely (prevents query batching attacks)
  • Limit query depth and complexity
  • Block field suggestions and introspection in production
  • Custom error handling for security violations
  • Production and development configuration presets

…ery limiting

- Add GraphQL Armor integration to GraphqlExpress infrastructure
- Implement alias query blocking with maxAliases: 0 by default
- Add query complexity limits (maxDepth, maxCost, maxDirectives, maxArguments)
- Integrate logger for security violation logging
- Add comprehensive test suite for GraphQL Armor features
- Update README with Armor configuration examples
- Add test scripts for running Armor-specific tests
- Fix logger integration in Armor error handling

Security Features:
- Disable GraphQL aliases completely (prevents query batching attacks)
- Limit query depth and complexity
- Block field suggestions and introspection in production
- Custom error handling for security violations
- Production and development configuration presets
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add a version for the @escape.tech/graphql-armor@^3 module to keep track of and understand which version was tested and works perfectly with it.

and there's no need to elaborate on the explanation in the "using AutoLoad" example.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add a version for the @escape.tech/graphql-armor@^3 module to keep track of and understand which version was tested and works perfectly with it.

Please add documentation, in the form of /** * Config Armor plugin */, to the section regarding Armor settings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants