GQLi

Definition

GQLi is a client library for building GraphQL queries in a programmatic way. It allows developers to construct GraphQL queries and mutations using a fluent API, making it easier to dynamically generate queries based on application logic. GQLi is particularly useful in environments where queries need to be constructed at runtime, providing a type-safe way to interact with GraphQL APIs.

Secure Settings Example

import {query, mutation, field} from 'content/glossary/gqli';

// Example of a secure query construction
const secureQuery = query(
    field('user', {id: '123'}, [
        field('name'),
        field('email'),
        field('roles', [], [
            field('name')
        ])
    ])
);

// Ensure sensitive fields are not exposed
console.log(secureQuery.toString());

Insecure Settings Example

import { query, field } from 'gqli';

// Example of an insecure query construction
const insecureQuery = query(
  field('user', { id: '123' }, [
    field('name'),
    field('email'),
    field('password'), // Exposing sensitive information
    field('creditCardInfo') // Exposing sensitive information
  ])
);

// Sensitive fields should not be included in queries
console.log(insecureQuery.toString());