Skip to content

Commit 55e8a81

Browse files
committed
docs(implementations): audit report
1 parent 2aae445 commit 55e8a81

File tree

22 files changed

+1378
-198
lines changed

22 files changed

+1378
-198
lines changed

implementations/apollo-server/README.md

Lines changed: 14 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,8 @@
33
<h1>GraphQL over HTTP audit report</h1>
44

55
<ul>
6-
<li><b>60</b> audits in total</li>
7-
<li><span style="font-family: monospace">✅</span> <b>54</b> pass</li>
6+
<li><b>68</b> audits in total</li>
7+
<li><span style="font-family: monospace">✅</span> <b>62</b> pass</li>
88
<li><span style="font-family: monospace">💡</span> <b>3</b> notices (suggestions)</li>
99
<li><span style="font-family: monospace">❗️</span> <b>3</b> warnings (optional)</li>
1010
</ul>
@@ -48,10 +48,18 @@
4848
<li><code>4763</code> MAY use 400 status code on array {variables} parameter</li>
4949
<li><code>2EA1</code> MUST allow map {variables} parameter when accepting application/graphql-response+json</li>
5050
<li><code>28B9</code> MUST allow map {variables} parameter when accepting application/json</li>
51-
<li><code>58B0</code> MUST use 400 status code on string {extensions} parameter</li>
52-
<li><code>58B1</code> MUST use 400 status code on number {extensions} parameter</li>
53-
<li><code>58B2</code> MUST use 400 status code on boolean {extensions} parameter</li>
54-
<li><code>58B3</code> MUST use 400 status code on array {extensions} parameter</li>
51+
<li><code>0280</code> MUST use 4xx or 5xx status codes on string {extensions} parameter when accepting application/graphql-response+json</li>
52+
<li><code>0281</code> MUST use 4xx or 5xx status codes on number {extensions} parameter when accepting application/graphql-response+json</li>
53+
<li><code>0282</code> MUST use 4xx or 5xx status codes on boolean {extensions} parameter when accepting application/graphql-response+json</li>
54+
<li><code>0283</code> MUST use 4xx or 5xx status codes on array {extensions} parameter when accepting application/graphql-response+json</li>
55+
<li><code>2330</code> SHOULD use 4xx status code on string {extensions} parameter when accepting application/graphql-response+json</li>
56+
<li><code>2331</code> SHOULD use 4xx status code on number {extensions} parameter when accepting application/graphql-response+json</li>
57+
<li><code>2332</code> SHOULD use 4xx status code on boolean {extensions} parameter when accepting application/graphql-response+json</li>
58+
<li><code>2333</code> SHOULD use 4xx status code on array {extensions} parameter when accepting application/graphql-response+json</li>
59+
<li><code>58B0</code> SHOULD use 4xx or 5xx status codes on string {extensions} parameter when accepting application/json</li>
60+
<li><code>58B1</code> SHOULD use 4xx or 5xx status codes on number {extensions} parameter when accepting application/json</li>
61+
<li><code>58B2</code> SHOULD use 4xx or 5xx status codes on boolean {extensions} parameter when accepting application/json</li>
62+
<li><code>58B3</code> SHOULD use 4xx or 5xx status codes on array {extensions} parameter when accepting application/json</li>
5563
<li><code>428F</code> MUST allow map {extensions} parameter when accepting application/graphql-response+json</li>
5664
<li><code>1B7A</code> MUST allow map {extensions} parameter when accepting application/json</li>
5765
<li><code>B6DC</code> MAY use 4xx or 5xx status codes on JSON parsing failure</li>

implementations/apollo-server/report.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
2-
"total": 60,
3-
"ok": 54,
2+
"total": 68,
3+
"ok": 62,
44
"notice": 3,
55
"warn": 3,
66
"error": 0

implementations/deno/README.md

Lines changed: 100 additions & 92 deletions
Original file line numberDiff line numberDiff line change
@@ -3,11 +3,11 @@
33
<h1>GraphQL over HTTP audit report</h1>
44

55
<ul>
6-
<li><b>60</b> audits in total</li>
7-
<li><span style="font-family: monospace">✅</span> <b>29</b> pass</li>
6+
<li><b>68</b> audits in total</li>
7+
<li><span style="font-family: monospace">✅</span> <b>37</b> pass</li>
88
<li><span style="font-family: monospace">💡</span> <b>14</b> notices (suggestions)</li>
9-
<li><span style="font-family: monospace">❗️</span> <b>5</b> warnings (optional)</li>
10-
<li><span style="font-family: monospace">❌</span> <b>12</b> errors (required)</li>
9+
<li><span style="font-family: monospace">❗️</span> <b>9</b> warnings (optional)</li>
10+
<li><span style="font-family: monospace">❌</span> <b>8</b> errors (required)</li>
1111
</ul>
1212

1313
<h2>Passing</h2>
@@ -33,6 +33,14 @@
3333
<li><code>4761</code> MAY use 400 status code on number {variables} parameter</li>
3434
<li><code>4762</code> MAY use 400 status code on boolean {variables} parameter</li>
3535
<li><code>28B9</code> MUST allow map {variables} parameter when accepting application/json</li>
36+
<li><code>0280</code> MUST use 4xx or 5xx status codes on string {extensions} parameter when accepting application/graphql-response+json</li>
37+
<li><code>0281</code> MUST use 4xx or 5xx status codes on number {extensions} parameter when accepting application/graphql-response+json</li>
38+
<li><code>0282</code> MUST use 4xx or 5xx status codes on boolean {extensions} parameter when accepting application/graphql-response+json</li>
39+
<li><code>0283</code> MUST use 4xx or 5xx status codes on array {extensions} parameter when accepting application/graphql-response+json</li>
40+
<li><code>2330</code> SHOULD use 4xx status code on string {extensions} parameter when accepting application/graphql-response+json</li>
41+
<li><code>2331</code> SHOULD use 4xx status code on number {extensions} parameter when accepting application/graphql-response+json</li>
42+
<li><code>2332</code> SHOULD use 4xx status code on boolean {extensions} parameter when accepting application/graphql-response+json</li>
43+
<li><code>2333</code> SHOULD use 4xx status code on array {extensions} parameter when accepting application/graphql-response+json</li>
3644
<li><code>1B7A</code> MUST allow map {extensions} parameter when accepting application/json</li>
3745
<li><code>B6DC</code> MAY use 4xx or 5xx status codes on JSON parsing failure</li>
3846
<li><code>BCF8</code> MAY use 400 status code on JSON parsing failure</li>
@@ -365,6 +373,94 @@ The server <i>MAY</i> support these, but are truly optional. These are suggestio
365373
<h2>Warnings</h2>
366374
The server <i>SHOULD</i> support these, but is not required.
367375
<ol>
376+
<li><code>58B0</code> SHOULD use 4xx or 5xx status codes on string {extensions} parameter when accepting application/json
377+
<details>
378+
<summary>Response status is not between 400 and 599</summary>
379+
<pre><code class="lang-json">{
380+
"statusText": "OK",
381+
"status": 200,
382+
"headers": {
383+
"vary": "Accept-Encoding",
384+
"date": "<timestamp>",
385+
"content-type": "application/json",
386+
"content-length": "59",
387+
"content-encoding": "gzip"
388+
},
389+
"body": {
390+
"data": {
391+
"__typename": "Query"
392+
}
393+
}
394+
}
395+
</code></pre>
396+
</details>
397+
</li>
398+
<li><code>58B1</code> SHOULD use 4xx or 5xx status codes on number {extensions} parameter when accepting application/json
399+
<details>
400+
<summary>Response status is not between 400 and 599</summary>
401+
<pre><code class="lang-json">{
402+
"statusText": "OK",
403+
"status": 200,
404+
"headers": {
405+
"vary": "Accept-Encoding",
406+
"date": "<timestamp>",
407+
"content-type": "application/json",
408+
"content-length": "59",
409+
"content-encoding": "gzip"
410+
},
411+
"body": {
412+
"data": {
413+
"__typename": "Query"
414+
}
415+
}
416+
}
417+
</code></pre>
418+
</details>
419+
</li>
420+
<li><code>58B2</code> SHOULD use 4xx or 5xx status codes on boolean {extensions} parameter when accepting application/json
421+
<details>
422+
<summary>Response status is not between 400 and 599</summary>
423+
<pre><code class="lang-json">{
424+
"statusText": "OK",
425+
"status": 200,
426+
"headers": {
427+
"vary": "Accept-Encoding",
428+
"date": "<timestamp>",
429+
"content-type": "application/json",
430+
"content-length": "59",
431+
"content-encoding": "gzip"
432+
},
433+
"body": {
434+
"data": {
435+
"__typename": "Query"
436+
}
437+
}
438+
}
439+
</code></pre>
440+
</details>
441+
</li>
442+
<li><code>58B3</code> SHOULD use 4xx or 5xx status codes on array {extensions} parameter when accepting application/json
443+
<details>
444+
<summary>Response status is not between 400 and 599</summary>
445+
<pre><code class="lang-json">{
446+
"statusText": "OK",
447+
"status": 200,
448+
"headers": {
449+
"vary": "Accept-Encoding",
450+
"date": "<timestamp>",
451+
"content-type": "application/json",
452+
"content-length": "59",
453+
"content-encoding": "gzip"
454+
},
455+
"body": {
456+
"data": {
457+
"__typename": "Query"
458+
}
459+
}
460+
}
461+
</code></pre>
462+
</details>
463+
</li>
368464
<li><code>556A</code> SHOULD use 400 status code on document parsing failure when accepting application/graphql-response+json
369465
<details>
370466
<summary>Response status code is not 400</summary>
@@ -574,94 +670,6 @@ The server <b>MUST</b> support these.
574670
</code></pre>
575671
</details>
576672
</li>
577-
<li><code>58B0</code> MUST use 400 status code on string {extensions} parameter
578-
<details>
579-
<summary>Response status code is not 400</summary>
580-
<pre><code class="lang-json">{
581-
"statusText": "OK",
582-
"status": 200,
583-
"headers": {
584-
"vary": "Accept-Encoding",
585-
"date": "<timestamp>",
586-
"content-type": "application/json",
587-
"content-length": "59",
588-
"content-encoding": "gzip"
589-
},
590-
"body": {
591-
"data": {
592-
"__typename": "Query"
593-
}
594-
}
595-
}
596-
</code></pre>
597-
</details>
598-
</li>
599-
<li><code>58B1</code> MUST use 400 status code on number {extensions} parameter
600-
<details>
601-
<summary>Response status code is not 400</summary>
602-
<pre><code class="lang-json">{
603-
"statusText": "OK",
604-
"status": 200,
605-
"headers": {
606-
"vary": "Accept-Encoding",
607-
"date": "<timestamp>",
608-
"content-type": "application/json",
609-
"content-length": "59",
610-
"content-encoding": "gzip"
611-
},
612-
"body": {
613-
"data": {
614-
"__typename": "Query"
615-
}
616-
}
617-
}
618-
</code></pre>
619-
</details>
620-
</li>
621-
<li><code>58B2</code> MUST use 400 status code on boolean {extensions} parameter
622-
<details>
623-
<summary>Response status code is not 400</summary>
624-
<pre><code class="lang-json">{
625-
"statusText": "OK",
626-
"status": 200,
627-
"headers": {
628-
"vary": "Accept-Encoding",
629-
"date": "<timestamp>",
630-
"content-type": "application/json",
631-
"content-length": "59",
632-
"content-encoding": "gzip"
633-
},
634-
"body": {
635-
"data": {
636-
"__typename": "Query"
637-
}
638-
}
639-
}
640-
</code></pre>
641-
</details>
642-
</li>
643-
<li><code>58B3</code> MUST use 400 status code on array {extensions} parameter
644-
<details>
645-
<summary>Response status code is not 400</summary>
646-
<pre><code class="lang-json">{
647-
"statusText": "OK",
648-
"status": 200,
649-
"headers": {
650-
"vary": "Accept-Encoding",
651-
"date": "<timestamp>",
652-
"content-type": "application/json",
653-
"content-length": "59",
654-
"content-encoding": "gzip"
655-
},
656-
"body": {
657-
"data": {
658-
"__typename": "Query"
659-
}
660-
}
661-
}
662-
</code></pre>
663-
</details>
664-
</li>
665673
<li><code>428F</code> MUST allow map {extensions} parameter when accepting application/graphql-response+json
666674
<details>
667675
<summary>Response status code is not 200</summary>

implementations/deno/report.json

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
2-
"total": 60,
3-
"ok": 29,
2+
"total": 68,
3+
"ok": 37,
44
"notice": 14,
5-
"warn": 5,
6-
"error": 12
5+
"warn": 9,
6+
"error": 8
77
}

0 commit comments

Comments
 (0)