Metadata-Version: 2.1
Name: graphql-utilities
Version: 0.4.0
Summary: Collection of utilities, middleware, decorators for graphql-core>=3.0
Home-page: https://github.com/melvinkcx/graphql-utilities
Author: Melvin Koh
Author-email: melvinkcx@gmail.com
License: UNKNOWN
Platform: UNKNOWN
Classifier: Development Status :: 3 - Alpha
Classifier: Environment :: Web Environment
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: MIT License
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.7
Classifier: Programming Language :: Python :: 3.6
Classifier: Programming Language :: Python :: 3.5
Classifier: Topic :: Software Development :: Libraries
Requires-Python: >=3.6,<4
Description-Content-Type: text/markdown
Requires-Dist: graphql-core (>=3.0)
Provides-Extra: dev
Requires-Dist: pytest (<6,>=5.3.4) ; extra == 'dev'
Requires-Dist: flake8 (<4,>=3.7.9) ; extra == 'dev'
Requires-Dist: pytest-describe (<1,>=0.12) ; extra == 'dev'
Requires-Dist: django (<3,>=1.11) ; extra == 'dev'
Requires-Dist: sphinx (<3,>=2.4.1) ; extra == 'dev'
Requires-Dist: sphinx-rtd-theme (<1,>=0.4.3) ; extra == 'dev'

# graphql-utilities

![](https://github.com/melvinkcx/graphql-utilities/workflows/tests/badge.svg)

**graphql-utilities** tries to secure your GraphQL API from malicious queries and provides utilities to make using `graphql-core` easier.

1. It comes with a custom configurable `ExtendedExecutionContext` class that is capable of performing:

   * **query cost analysis**: define the cost of your queries using the `@cost()` directive provided, `graphql-utilities` provides helper functions and custom execution context to protect you from overly complex queries.
   * **depth limiting**: limit the maximum depth of queries, it's especially useful with object types with recursive relationship

2. It also ships decorators for:

   * **resource-level/one-shot middleware**: middleware in `graphql-core` is run at field-level, it is handly when you need your middleware to run only once, especially auth-related middleware.

## Installation

```sh
pip install graphql-utilities
```

Alternatively, if you use pipenv:

```sh
pipenv install graphql-utilities
```

## Examples

### Operation-level middleware (One-shot middleware)

```python
from graphql_utilities.decorators import run_only_once


class AuthMiddleware:
    @run_only_once
    def resolve(self, next_, root, info, *args, **kwargs):
        # middleware logic
        return next_(root, info, *args, **kwargs)   
```

### Limiting Query Depth

```python
# import your schema
from graphql import execute, parse   # Requires `graphql-core>=3.0`
from graphql_utilities.execution import ExtendedExecutionContext


query = '{ field_1_str field_2_int field_3_obj { field_3_obj_sub_1 { xxx } } }'
graphql_sync(schema=schema, source=query,
               context_value={"depth_analysis": {
                   "max_depth": 2   # Maximum depth allowed
               }},
               execution_context_class=ExtendedExecutionContext     # Use the `ExtendedExecutionContext` provided in `graphql-utilities`
        )
```

### Query Cost Analysis

See the documentation at [https://graphql-utilities.readthedocs.io/en/latest/](https://graphql-utilities.readthedocs.io/en/latest/)

## Motivation

In recent projects, I ran into some problems with `graphene` and `graphql-core` including missing operation-level middleware (See [issue here](https://github.com/graphql-python/graphene/issues/1117)), etc. 
`graphql-utilities` is a compilation of utilities and custom execution context for depth analysis, etc targeting `graphql-core>=3.0`.

## Contributing

Any form of contribution, feature requests, bug reports, pull requests are largely welcome.  

## Licenses

MIT Licensed. GraphQL logo is licensed under Facebook [BSD](http://opensource.org/licenses/bsd-license.php).

