@@ -3,8 +3,8 @@ _* This report was auto-generated by graphql-http_
33# GraphQL over HTTP audit report
44
55- ** 79** audits in total
6- - ✅ ** 43 ** pass
7- - ⚠️ ** 36 ** warnings (optional)
6+ - ✅ ** 53 ** pass
7+ - ⚠️ ** 26 ** warnings (optional)
88
99## Passing
10101 . SHOULD accept application/graphql-response+json and match the content-type
@@ -25,31 +25,41 @@ _* This report was auto-generated by graphql-http_
252516 . SHOULD use 400 status code on array {query} parameter when accepting application/graphql-response+json
262617 . SHOULD allow string {query} parameter when accepting application/graphql-response+json
272718 . MUST allow string {query} parameter when accepting application/json
28- 19 . SHOULD allow string {operationName} parameter when accepting application/graphql-response+json
29- 20 . MUST allow string {operationName} parameter when accepting application/json
30- 21 . SHOULD allow null {variables} parameter when accepting application/graphql-response+json
31- 22 . MUST allow null {variables} parameter when accepting application/json
32- 23 . SHOULD allow null {operationName} parameter when accepting application/graphql-response+json
33- 24 . MUST allow null {operationName} parameter when accepting application/json
34- 25 . SHOULD allow null {extensions} parameter when accepting application/graphql-response+json
35- 26 . MUST allow null {extensions} parameter when accepting application/json
36- 27 . SHOULD use 400 status code on string {variables} parameter when accepting application/graphql-response+json
37- 28 . SHOULD allow map {variables} parameter when accepting application/graphql-response+json
38- 29 . MUST allow map {variables} parameter when accepting application/json
39- 30 . SHOULD use 400 status code on string {extensions} parameter when accepting application/graphql-response+json
40- 31 . SHOULD allow map {extensions} parameter when accepting application/graphql-response+json
41- 32 . MUST allow map {extensions} parameter when accepting application/json
42- 33 . SHOULD use 4xx or 5xx status codes on JSON parsing failure when accepting application/graphql-response+json
43- 34 . SHOULD use 400 status code on JSON parsing failure when accepting application/graphql-response+json
44- 35 . SHOULD use 4xx or 5xx status codes if parameters are invalid when accepting application/graphql-response+json
45- 36 . SHOULD use 400 status code if parameters are invalid when accepting application/graphql-response+json
46- 37 . SHOULD not contain the data entry if parameters are invalid when accepting application/graphql-response+json
47- 38 . SHOULD use 4xx or 5xx status codes on document parsing failure when accepting application/graphql-response+json
48- 39 . SHOULD use 400 status code on document parsing failure when accepting application/graphql-response+json
49- 40 . SHOULD not contain the data entry on document parsing failure when accepting application/graphql-response+json
50- 41 . SHOULD use 4xx or 5xx status codes on document validation failure when accepting application/graphql-response+json
51- 42 . SHOULD use 400 status code on document validation failure when accepting application/graphql-response+json
52- 43 . SHOULD not contain the data entry on document validation failure when accepting application/graphql-response+json
28+ 19 . SHOULD use 400 status code on object {operationName} parameter when accepting application/graphql-response+json
29+ 20 . SHOULD use 400 status code on number {operationName} parameter when accepting application/graphql-response+json
30+ 21 . SHOULD use 400 status code on boolean {operationName} parameter when accepting application/graphql-response+json
31+ 22 . SHOULD use 400 status code on array {operationName} parameter when accepting application/graphql-response+json
32+ 23 . SHOULD allow string {operationName} parameter when accepting application/graphql-response+json
33+ 24 . MUST allow string {operationName} parameter when accepting application/json
34+ 25 . SHOULD allow null {variables} parameter when accepting application/graphql-response+json
35+ 26 . MUST allow null {variables} parameter when accepting application/json
36+ 27 . SHOULD allow null {operationName} parameter when accepting application/graphql-response+json
37+ 28 . MUST allow null {operationName} parameter when accepting application/json
38+ 29 . SHOULD allow null {extensions} parameter when accepting application/graphql-response+json
39+ 30 . MUST allow null {extensions} parameter when accepting application/json
40+ 31 . SHOULD use 400 status code on string {variables} parameter when accepting application/graphql-response+json
41+ 32 . SHOULD use 400 status code on number {variables} parameter when accepting application/graphql-response+json
42+ 33 . SHOULD use 400 status code on boolean {variables} parameter when accepting application/graphql-response+json
43+ 34 . SHOULD use 400 status code on array {variables} parameter when accepting application/graphql-response+json
44+ 35 . SHOULD allow map {variables} parameter when accepting application/graphql-response+json
45+ 36 . MUST allow map {variables} parameter when accepting application/json
46+ 37 . SHOULD use 400 status code on string {extensions} parameter when accepting application/graphql-response+json
47+ 38 . SHOULD use 400 status code on number {extensions} parameter when accepting application/graphql-response+json
48+ 39 . SHOULD use 400 status code on boolean {extensions} parameter when accepting application/graphql-response+json
49+ 40 . SHOULD use 400 status code on array {extensions} parameter when accepting application/graphql-response+json
50+ 41 . SHOULD allow map {extensions} parameter when accepting application/graphql-response+json
51+ 42 . MUST allow map {extensions} parameter when accepting application/json
52+ 43 . SHOULD use 4xx or 5xx status codes on JSON parsing failure when accepting application/graphql-response+json
53+ 44 . SHOULD use 400 status code on JSON parsing failure when accepting application/graphql-response+json
54+ 45 . SHOULD use 4xx or 5xx status codes if parameters are invalid when accepting application/graphql-response+json
55+ 46 . SHOULD use 400 status code if parameters are invalid when accepting application/graphql-response+json
56+ 47 . SHOULD not contain the data entry if parameters are invalid when accepting application/graphql-response+json
57+ 48 . SHOULD use 4xx or 5xx status codes on document parsing failure when accepting application/graphql-response+json
58+ 49 . SHOULD use 400 status code on document parsing failure when accepting application/graphql-response+json
59+ 50 . SHOULD not contain the data entry on document parsing failure when accepting application/graphql-response+json
60+ 51 . SHOULD use 4xx or 5xx status codes on document validation failure when accepting application/graphql-response+json
61+ 52 . SHOULD use 400 status code on document validation failure when accepting application/graphql-response+json
62+ 53 . SHOULD not contain the data entry on document validation failure when accepting application/graphql-response+json
5363
5464## Warnings
5565The server _ SHOULD_ support these, but is not required.
@@ -81,119 +91,79 @@ Status code 400 is not 200
8191```
8292Status code 400 is not 200
8393```
84- 8 . SHOULD use 400 status code on object {operationName} parameter when accepting application/graphql-response+ json<br />
94+ 8 . SHOULD use 200 status code with errors field on object {operationName} parameter when accepting application/json<br />
8595```
86- Status code 200 is not 400
87- ```
88- 9 . SHOULD use 400 status code on number {operationName} parameter when accepting application/graphql-response+json<br />
89- ```
90- Status code 200 is not 400
91- ```
92- 10 . SHOULD use 400 status code on boolean {operationName} parameter when accepting application/graphql-response+json<br />
93- ```
94- Status code 200 is not 400
95- ```
96- 11 . SHOULD use 400 status code on array {operationName} parameter when accepting application/graphql-response+json<br />
97- ```
98- Status code 200 is not 400
99- ```
100- 12 . SHOULD use 200 status code with errors field on object {operationName} parameter when accepting application/json<br />
101- ```
102- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
103- ```
104- 13 . SHOULD use 200 status code with errors field on number {operationName} parameter when accepting application/json<br />
105- ```
106- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
107- ```
108- 14 . SHOULD use 200 status code with errors field on boolean {operationName} parameter when accepting application/json<br />
109- ```
110- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
111- ```
112- 15 . SHOULD use 200 status code with errors field on array {operationName} parameter when accepting application/json<br />
113- ```
114- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
115- ```
116- 16 . SHOULD use 400 status code on number {variables} parameter when accepting application/graphql-response+json<br />
117- ```
118- Status code 200 is not 400
119- ```
120- 17 . SHOULD use 400 status code on boolean {variables} parameter when accepting application/graphql-response+json<br />
121- ```
122- Status code 200 is not 400
123- ```
124- 18 . SHOULD use 400 status code on array {variables} parameter when accepting application/graphql-response+json<br />
125- ```
126- Status code 200 is not 400
96+ Status code 400 is not 200
12797```
128- 19 . SHOULD use 200 status code with errors field on string {variables } parameter when accepting application/json<br />
98+ 9 . SHOULD use 200 status code with errors field on number {operationName } parameter when accepting application/json<br />
12999```
130100Status code 400 is not 200
131101```
132- 20 . SHOULD use 200 status code with errors field on number {variables } parameter when accepting application/json<br />
102+ 10 . SHOULD use 200 status code with errors field on boolean {operationName } parameter when accepting application/json<br />
133103```
134- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
104+ Status code 400 is not 200
135105```
136- 21 . SHOULD use 200 status code with errors field on boolean {variables } parameter when accepting application/json<br />
106+ 11 . SHOULD use 200 status code with errors field on array {operationName } parameter when accepting application/json<br />
137107```
138- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
108+ Status code 400 is not 200
139109```
140- 22 . SHOULD use 200 status code with errors field on array {variables} parameter when accepting application/json<br />
110+ 12 . SHOULD use 200 status code with errors field on string {variables} parameter when accepting application/json<br />
141111```
142- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
112+ Status code 400 is not 200
143113```
144- 23 . MAY allow URL-encoded JSON string {variables} parameter in GETs when accepting application/graphql-response+ json<br />
114+ 13 . SHOULD use 200 status code with errors field on number {variables} parameter when accepting application/json<br />
145115```
146116Status code 400 is not 200
147117```
148- 24 . MAY allow URL-encoded JSON string {variables} parameter in GETs when accepting application/json<br />
118+ 14 . SHOULD use 200 status code with errors field on boolean {variables} parameter when accepting application/json<br />
149119```
150120Status code 400 is not 200
151121```
152- 25 . SHOULD use 400 status code on number {extensions } parameter when accepting application/graphql-response+ json<br />
122+ 15 . SHOULD use 200 status code with errors field on array {variables } parameter when accepting application/json<br />
153123```
154- Status code 200 is not 400
124+ Status code 400 is not 200
155125```
156- 26 . SHOULD use 400 status code on boolean {extensions } parameter when accepting application/graphql-response+json<br />
126+ 16 . MAY allow URL-encoded JSON string {variables } parameter in GETs when accepting application/graphql-response+json<br />
157127```
158- Status code 200 is not 400
128+ Status code 400 is not 200
159129```
160- 27 . SHOULD use 400 status code on array {extensions } parameter when accepting application/graphql-response+ json<br />
130+ 17 . MAY allow URL-encoded JSON string {variables } parameter in GETs when accepting application/json<br />
161131```
162- Status code 200 is not 400
132+ Status code 400 is not 200
163133```
164- 28 . SHOULD use 200 status code with errors field on string {extensions} parameter when accepting application/json<br />
134+ 18 . SHOULD use 200 status code with errors field on string {extensions} parameter when accepting application/json<br />
165135```
166136Status code 400 is not 200
167137```
168- 29 . SHOULD use 200 status code with errors field on number {extensions} parameter when accepting application/json<br />
138+ 19 . SHOULD use 200 status code with errors field on number {extensions} parameter when accepting application/json<br />
169139```
170- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
140+ Status code 400 is not 200
171141```
172- 30 . SHOULD use 200 status code with errors field on boolean {extensions} parameter when accepting application/json<br />
142+ 20 . SHOULD use 200 status code with errors field on boolean {extensions} parameter when accepting application/json<br />
173143```
174- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
144+ Status code 400 is not 200
175145```
176- 31 . SHOULD use 200 status code with errors field on array {extensions} parameter when accepting application/json<br />
146+ 21 . SHOULD use 200 status code with errors field on array {extensions} parameter when accepting application/json<br />
177147```
178- Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
148+ Status code 400 is not 200
179149```
180- 32 . SHOULD use 200 status code on JSON parsing failure when accepting application/json<br />
150+ 22 . SHOULD use 200 status code on JSON parsing failure when accepting application/json<br />
181151```
182152Status code 400 is not 200
183153```
184- 33 . SHOULD use 200 status code if parameters are invalid when accepting application/json<br />
154+ 23 . SHOULD use 200 status code if parameters are invalid when accepting application/json<br />
185155```
186156Status code 400 is not 200
187157```
188- 34 . SHOULD use 200 status code on document parsing failure when accepting application/json<br />
158+ 24 . SHOULD use 200 status code on document parsing failure when accepting application/json<br />
189159```
190160Status code 400 is not 200
191161```
192- 35 . SHOULD use 200 status code on document validation failure when accepting application/json<br />
162+ 25 . SHOULD use 200 status code on document validation failure when accepting application/json<br />
193163```
194164Status code 400 is not 200
195165```
196- 36 . SHOULD not contain the data entry on JSON parsing failure when accepting application/graphql-response+json<br />
166+ 26 . SHOULD not contain the data entry on JSON parsing failure when accepting application/graphql-response+json<br />
197167```
198168Response body is not valid JSON. Got "<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<title>Error</title>\n</head>\n<body>\n<pre>SyntaxError: Unexpected end of JSON input<br> at JSON.parse (<anonymous>)<br> at parse (/home/runner/work/graphql-http/graphql-http/node_modules/body-parser/lib/types/json.js:89:19)<br> at /home/runner/work/graphql-http/graphql-http/node_modules/body-parser/lib/read.js:128:18<br> at AsyncResource.runInAsyncScope (node:async_hooks:203:9)<br> at invokeCallback (/home/runner/work/graphql-http/graphql-http/node_modules/raw-body/index.js:231:16)<br> at done (/home/runner/work/graphql-http/graphql-http/node_modules/raw-body/index.js:220:7)<br> at IncomingMessage.onEnd (/home/runner/work/graphql-http/graphql-http/node_modules/raw-body/index.js:280:7)<br> at IncomingMessage.emit (node:events:513:28)<br> at endReadableNT (node:internal/streams/rea...
199169```
0 commit comments