@@ -3,8 +3,8 @@ _* This report was auto-generated by graphql-http_
3
3
# GraphQL over HTTP audit report
4
4
5
5
- ** 79** audits in total
6
- - ✅ ** 43 ** pass
7
- - ⚠️ ** 36 ** warnings (optional)
6
+ - ✅ ** 53 ** pass
7
+ - ⚠️ ** 26 ** warnings (optional)
8
8
9
9
## Passing
10
10
1 . SHOULD accept application/graphql-response+json and match the content-type
@@ -25,31 +25,41 @@ _* This report was auto-generated by graphql-http_
25
25
16 . SHOULD use 400 status code on array {query} parameter when accepting application/graphql-response+json
26
26
17 . SHOULD allow string {query} parameter when accepting application/graphql-response+json
27
27
18 . MUST allow string {query} parameter when accepting application/json
28
- 19 . SHOULD allow string {operationName} parameter when accepting application/graphql-response+json
29
- 20 . MUST allow string {operationName} parameter when accepting application/json
30
- 21 . SHOULD allow null {variables} parameter when accepting application/graphql-response+json
31
- 22 . MUST allow null {variables} parameter when accepting application/json
32
- 23 . SHOULD allow null {operationName} parameter when accepting application/graphql-response+json
33
- 24 . MUST allow null {operationName} parameter when accepting application/json
34
- 25 . SHOULD allow null {extensions} parameter when accepting application/graphql-response+json
35
- 26 . MUST allow null {extensions} parameter when accepting application/json
36
- 27 . SHOULD use 400 status code on string {variables} parameter when accepting application/graphql-response+json
37
- 28 . SHOULD allow map {variables} parameter when accepting application/graphql-response+json
38
- 29 . MUST allow map {variables} parameter when accepting application/json
39
- 30 . SHOULD use 400 status code on string {extensions} parameter when accepting application/graphql-response+json
40
- 31 . SHOULD allow map {extensions} parameter when accepting application/graphql-response+json
41
- 32 . MUST allow map {extensions} parameter when accepting application/json
42
- 33 . SHOULD use 4xx or 5xx status codes on JSON parsing failure when accepting application/graphql-response+json
43
- 34 . SHOULD use 400 status code on JSON parsing failure when accepting application/graphql-response+json
44
- 35 . SHOULD use 4xx or 5xx status codes if parameters are invalid when accepting application/graphql-response+json
45
- 36 . SHOULD use 400 status code if parameters are invalid when accepting application/graphql-response+json
46
- 37 . SHOULD not contain the data entry if parameters are invalid when accepting application/graphql-response+json
47
- 38 . SHOULD use 4xx or 5xx status codes on document parsing failure when accepting application/graphql-response+json
48
- 39 . SHOULD use 400 status code on document parsing failure when accepting application/graphql-response+json
49
- 40 . SHOULD not contain the data entry on document parsing failure when accepting application/graphql-response+json
50
- 41 . SHOULD use 4xx or 5xx status codes on document validation failure when accepting application/graphql-response+json
51
- 42 . SHOULD use 400 status code on document validation failure when accepting application/graphql-response+json
52
- 43 . SHOULD not contain the data entry on document validation failure when accepting application/graphql-response+json
28
+ 19 . SHOULD use 400 status code on object {operationName} parameter when accepting application/graphql-response+json
29
+ 20 . SHOULD use 400 status code on number {operationName} parameter when accepting application/graphql-response+json
30
+ 21 . SHOULD use 400 status code on boolean {operationName} parameter when accepting application/graphql-response+json
31
+ 22 . SHOULD use 400 status code on array {operationName} parameter when accepting application/graphql-response+json
32
+ 23 . SHOULD allow string {operationName} parameter when accepting application/graphql-response+json
33
+ 24 . MUST allow string {operationName} parameter when accepting application/json
34
+ 25 . SHOULD allow null {variables} parameter when accepting application/graphql-response+json
35
+ 26 . MUST allow null {variables} parameter when accepting application/json
36
+ 27 . SHOULD allow null {operationName} parameter when accepting application/graphql-response+json
37
+ 28 . MUST allow null {operationName} parameter when accepting application/json
38
+ 29 . SHOULD allow null {extensions} parameter when accepting application/graphql-response+json
39
+ 30 . MUST allow null {extensions} parameter when accepting application/json
40
+ 31 . SHOULD use 400 status code on string {variables} parameter when accepting application/graphql-response+json
41
+ 32 . SHOULD use 400 status code on number {variables} parameter when accepting application/graphql-response+json
42
+ 33 . SHOULD use 400 status code on boolean {variables} parameter when accepting application/graphql-response+json
43
+ 34 . SHOULD use 400 status code on array {variables} parameter when accepting application/graphql-response+json
44
+ 35 . SHOULD allow map {variables} parameter when accepting application/graphql-response+json
45
+ 36 . MUST allow map {variables} parameter when accepting application/json
46
+ 37 . SHOULD use 400 status code on string {extensions} parameter when accepting application/graphql-response+json
47
+ 38 . SHOULD use 400 status code on number {extensions} parameter when accepting application/graphql-response+json
48
+ 39 . SHOULD use 400 status code on boolean {extensions} parameter when accepting application/graphql-response+json
49
+ 40 . SHOULD use 400 status code on array {extensions} parameter when accepting application/graphql-response+json
50
+ 41 . SHOULD allow map {extensions} parameter when accepting application/graphql-response+json
51
+ 42 . MUST allow map {extensions} parameter when accepting application/json
52
+ 43 . SHOULD use 4xx or 5xx status codes on JSON parsing failure when accepting application/graphql-response+json
53
+ 44 . SHOULD use 400 status code on JSON parsing failure when accepting application/graphql-response+json
54
+ 45 . SHOULD use 4xx or 5xx status codes if parameters are invalid when accepting application/graphql-response+json
55
+ 46 . SHOULD use 400 status code if parameters are invalid when accepting application/graphql-response+json
56
+ 47 . SHOULD not contain the data entry if parameters are invalid when accepting application/graphql-response+json
57
+ 48 . SHOULD use 4xx or 5xx status codes on document parsing failure when accepting application/graphql-response+json
58
+ 49 . SHOULD use 400 status code on document parsing failure when accepting application/graphql-response+json
59
+ 50 . SHOULD not contain the data entry on document parsing failure when accepting application/graphql-response+json
60
+ 51 . SHOULD use 4xx or 5xx status codes on document validation failure when accepting application/graphql-response+json
61
+ 52 . SHOULD use 400 status code on document validation failure when accepting application/graphql-response+json
62
+ 53 . SHOULD not contain the data entry on document validation failure when accepting application/graphql-response+json
53
63
54
64
## Warnings
55
65
The server _ SHOULD_ support these, but is not required.
@@ -81,119 +91,79 @@ Status code 400 is not 200
81
91
```
82
92
Status code 400 is not 200
83
93
```
84
- 8 . SHOULD use 400 status code on object {operationName} parameter when accepting application/graphql-response+ json<br />
94
+ 8 . SHOULD use 200 status code with errors field on object {operationName} parameter when accepting application/json<br />
85
95
```
86
- Status code 200 is not 400
87
- ```
88
- 9 . SHOULD use 400 status code on number {operationName} parameter when accepting application/graphql-response+json<br />
89
- ```
90
- Status code 200 is not 400
91
- ```
92
- 10 . SHOULD use 400 status code on boolean {operationName} parameter when accepting application/graphql-response+json<br />
93
- ```
94
- Status code 200 is not 400
95
- ```
96
- 11 . SHOULD use 400 status code on array {operationName} parameter when accepting application/graphql-response+json<br />
97
- ```
98
- Status code 200 is not 400
99
- ```
100
- 12 . SHOULD use 200 status code with errors field on object {operationName} parameter when accepting application/json<br />
101
- ```
102
- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
103
- ```
104
- 13 . SHOULD use 200 status code with errors field on number {operationName} parameter when accepting application/json<br />
105
- ```
106
- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
107
- ```
108
- 14 . SHOULD use 200 status code with errors field on boolean {operationName} parameter when accepting application/json<br />
109
- ```
110
- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
111
- ```
112
- 15 . SHOULD use 200 status code with errors field on array {operationName} parameter when accepting application/json<br />
113
- ```
114
- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
115
- ```
116
- 16 . SHOULD use 400 status code on number {variables} parameter when accepting application/graphql-response+json<br />
117
- ```
118
- Status code 200 is not 400
119
- ```
120
- 17 . SHOULD use 400 status code on boolean {variables} parameter when accepting application/graphql-response+json<br />
121
- ```
122
- Status code 200 is not 400
123
- ```
124
- 18 . SHOULD use 400 status code on array {variables} parameter when accepting application/graphql-response+json<br />
125
- ```
126
- Status code 200 is not 400
96
+ Status code 400 is not 200
127
97
```
128
- 19 . SHOULD use 200 status code with errors field on string {variables } parameter when accepting application/json<br />
98
+ 9 . SHOULD use 200 status code with errors field on number {operationName } parameter when accepting application/json<br />
129
99
```
130
100
Status code 400 is not 200
131
101
```
132
- 20 . SHOULD use 200 status code with errors field on number {variables } parameter when accepting application/json<br />
102
+ 10 . SHOULD use 200 status code with errors field on boolean {operationName } parameter when accepting application/json<br />
133
103
```
134
- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
104
+ Status code 400 is not 200
135
105
```
136
- 21 . SHOULD use 200 status code with errors field on boolean {variables } parameter when accepting application/json<br />
106
+ 11 . SHOULD use 200 status code with errors field on array {operationName } parameter when accepting application/json<br />
137
107
```
138
- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
108
+ Status code 400 is not 200
139
109
```
140
- 22 . SHOULD use 200 status code with errors field on array {variables} parameter when accepting application/json<br />
110
+ 12 . SHOULD use 200 status code with errors field on string {variables} parameter when accepting application/json<br />
141
111
```
142
- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
112
+ Status code 400 is not 200
143
113
```
144
- 23 . MAY allow URL-encoded JSON string {variables} parameter in GETs when accepting application/graphql-response+ json<br />
114
+ 13 . SHOULD use 200 status code with errors field on number {variables} parameter when accepting application/json<br />
145
115
```
146
116
Status code 400 is not 200
147
117
```
148
- 24 . MAY allow URL-encoded JSON string {variables} parameter in GETs when accepting application/json<br />
118
+ 14 . SHOULD use 200 status code with errors field on boolean {variables} parameter when accepting application/json<br />
149
119
```
150
120
Status code 400 is not 200
151
121
```
152
- 25 . SHOULD use 400 status code on number {extensions } parameter when accepting application/graphql-response+ json<br />
122
+ 15 . SHOULD use 200 status code with errors field on array {variables } parameter when accepting application/json<br />
153
123
```
154
- Status code 200 is not 400
124
+ Status code 400 is not 200
155
125
```
156
- 26 . SHOULD use 400 status code on boolean {extensions } parameter when accepting application/graphql-response+json<br />
126
+ 16 . MAY allow URL-encoded JSON string {variables } parameter in GETs when accepting application/graphql-response+json<br />
157
127
```
158
- Status code 200 is not 400
128
+ Status code 400 is not 200
159
129
```
160
- 27 . SHOULD use 400 status code on array {extensions } parameter when accepting application/graphql-response+ json<br />
130
+ 17 . MAY allow URL-encoded JSON string {variables } parameter in GETs when accepting application/json<br />
161
131
```
162
- Status code 200 is not 400
132
+ Status code 400 is not 200
163
133
```
164
- 28 . SHOULD use 200 status code with errors field on string {extensions} parameter when accepting application/json<br />
134
+ 18 . SHOULD use 200 status code with errors field on string {extensions} parameter when accepting application/json<br />
165
135
```
166
136
Status code 400 is not 200
167
137
```
168
- 29 . SHOULD use 200 status code with errors field on number {extensions} parameter when accepting application/json<br />
138
+ 19 . SHOULD use 200 status code with errors field on number {extensions} parameter when accepting application/json<br />
169
139
```
170
- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
140
+ Status code 400 is not 200
171
141
```
172
- 30 . SHOULD use 200 status code with errors field on boolean {extensions} parameter when accepting application/json<br />
142
+ 20 . SHOULD use 200 status code with errors field on boolean {extensions} parameter when accepting application/json<br />
173
143
```
174
- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
144
+ Status code 400 is not 200
175
145
```
176
- 31 . SHOULD use 200 status code with errors field on array {extensions} parameter when accepting application/json<br />
146
+ 21 . SHOULD use 200 status code with errors field on array {extensions} parameter when accepting application/json<br />
177
147
```
178
- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
148
+ Status code 400 is not 200
179
149
```
180
- 32 . SHOULD use 200 status code on JSON parsing failure when accepting application/json<br />
150
+ 22 . SHOULD use 200 status code on JSON parsing failure when accepting application/json<br />
181
151
```
182
152
Status code 400 is not 200
183
153
```
184
- 33 . SHOULD use 200 status code if parameters are invalid when accepting application/json<br />
154
+ 23 . SHOULD use 200 status code if parameters are invalid when accepting application/json<br />
185
155
```
186
156
Status code 400 is not 200
187
157
```
188
- 34 . SHOULD use 200 status code on document parsing failure when accepting application/json<br />
158
+ 24 . SHOULD use 200 status code on document parsing failure when accepting application/json<br />
189
159
```
190
160
Status code 400 is not 200
191
161
```
192
- 35 . SHOULD use 200 status code on document validation failure when accepting application/json<br />
162
+ 25 . SHOULD use 200 status code on document validation failure when accepting application/json<br />
193
163
```
194
164
Status code 400 is not 200
195
165
```
196
- 36 . SHOULD not contain the data entry on JSON parsing failure when accepting application/graphql-response+json<br />
166
+ 26 . SHOULD not contain the data entry on JSON parsing failure when accepting application/graphql-response+json<br />
197
167
```
198
168
Response body is not valid JSON. Got "<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<title>Error</title>\n</head>\n<body>\n<pre>SyntaxError: Unexpected end of JSON input<br> at JSON.parse (<anonymous>)<br> at parse (/home/runner/work/graphql-http/graphql-http/node_modules/body-parser/lib/types/json.js:89:19)<br> at /home/runner/work/graphql-http/graphql-http/node_modules/body-parser/lib/read.js:128:18<br> at AsyncResource.runInAsyncScope (node:async_hooks:203:9)<br> at invokeCallback (/home/runner/work/graphql-http/graphql-http/node_modules/raw-body/index.js:231:16)<br> at done (/home/runner/work/graphql-http/graphql-http/node_modules/raw-body/index.js:220:7)<br> at IncomingMessage.onEnd (/home/runner/work/graphql-http/graphql-http/node_modules/raw-body/index.js:280:7)<br> at IncomingMessage.emit (node:events:513:28)<br> at endReadableNT (node:internal/streams/rea...
199
169
```
0 commit comments