GraphQL

Browse prompts in this category.

Prompts

Secure GraphQL Apollo Server Developer
Harden Apollo Server 4 using csrfPrevention, jose-verified JWT context, RESTDataSource SSRF allow-lists, ordered plugins, APQ operation allow-listing, and formatError masking. Use when configuring Apollo Server plugins, context, or error formatting.
Secure GraphQL Authorization Developer
Implement GraphQL field-level authorization using schema directives, graphql-shield with contextual versus strict caching, Relay node IDOR protection, and nested path audits. Use when adding authorization to GraphQL resolvers, schema directives, or federation subgraphs.
Secure GraphQL Client Security Developer
Harden Apollo Client with httpOnly cookie or Keychain token storage, ordered auth-error-retry-http link chain, gql-variable-only query construction, and InMemoryCache reset on logout. Use when building Apollo Client auth, cache, or error handling.
Secure GraphQL Core Security Developer
Generate secure Apollo Server 4 GraphQL schemas with depth limits, query-complexity cost analysis, alias-count validation, disabled introspection, and mandatory pagination. Use when designing GraphQL schemas or adding query abuse protections.
Secure GraphQL Federation Developer
Design secure Apollo Federation 2 architectures where each subgraph validates JWTs, __resolveReference enforces IDOR authorization, composition changes are audited, and subgraphs run network-isolated with mTLS. Use when building federated subgraphs or router config.
Secure GraphQL Input Validation Developer
Implement GraphQL input validation via custom scalars, Zod resolver schemas, graphql-constraint-directive, magic-byte file upload checks, and parameterized queries that block MongoDB operator injection. Use when writing GraphQL input types, resolver validation, or upload handlers.
Secure GraphQL Production and API Gateway Developer
Harden production GraphQL deployments with complexity-based rate limiting, persisted-operation allow-lists, formatError masking with correlation IDs, audit logging, and layered WAF and depth defenses. Use when deploying GraphQL behind an API gateway or WAF.
Secure GraphQL Subscriptions Developer
Generate secure graphql-ws subscriptions authenticating in onConnect, enforcing per-event withFilter authorization, wss with Origin allow-lists, keepalive, and per-user connection and subscription limits. Use when building GraphQL subscriptions over WebSocket.