Skip to content

Latest commit

 

History

History
81 lines (77 loc) · 7.3 KB

File metadata and controls

81 lines (77 loc) · 7.3 KB

* This report was auto-generated by graphql-http

GraphQL over HTTP audit report

  • 68 audits in total
  • 68 pass

Passing

  1. 22EB MUST accept application/graphql-response+json and match the content-type
  2. 4655 MUST accept application/json and match the content-type
  3. 47DE SHOULD accept */* and use application/graphql-response+json or application/json for the content-type
  4. 80D8 SHOULD assume application/json or application/graphql-response+json content-type when accept is missing
  5. 82A3 MUST use utf-8 encoding when responding
  6. BF61 MUST accept utf-8 encoded request
  7. 78D5 MUST assume utf-8 in request if encoding is unspecified
  8. 2C94 MUST accept POST requests
  9. 5A70 MAY accept application/x-www-form-urlencoded formatted GET requests
  10. 9C48 MAY NOT allow executing mutations on GET requests
  11. 9ABE MAY respond with 4xx status code if content-type is not supplied on POST requests
  12. 03D4 MUST accept application/json POST requests
  13. A5BF MAY use 400 status code when request body is missing on POST
  14. 423L MAY use 400 status code on missing {query} parameter
  15. LKJ0 MAY use 400 status code on object {query} parameter
  16. LKJ1 MAY use 400 status code on number {query} parameter
  17. LKJ2 MAY use 400 status code on boolean {query} parameter
  18. LKJ3 MAY use 400 status code on array {query} parameter
  19. 34A2 MUST allow string {query} parameter when accepting application/graphql-response+json
  20. 13EE MUST allow string {query} parameter when accepting application/json
  21. 6C00 MAY use 400 status code on object {operationName} parameter
  22. 6C01 MAY use 400 status code on number {operationName} parameter
  23. 6C02 MAY use 400 status code on boolean {operationName} parameter
  24. 6C03 MAY use 400 status code on array {operationName} parameter
  25. 8161 MUST allow string {operationName} parameter when accepting application/graphql-response+json
  26. B8B3 MUST allow string {operationName} parameter when accepting application/json
  27. 94B0 MUST allow null {variables} parameter when accepting application/graphql-response+json
  28. 0220 MUST allow null {variables} parameter when accepting application/json
  29. 94B1 MUST allow null {operationName} parameter when accepting application/graphql-response+json
  30. 0221 MUST allow null {operationName} parameter when accepting application/json
  31. 94B2 MUST allow null {extensions} parameter when accepting application/graphql-response+json
  32. 0222 MUST allow null {extensions} parameter when accepting application/json
  33. 4760 MAY use 400 status code on string {variables} parameter
  34. 4761 MAY use 400 status code on number {variables} parameter
  35. 4762 MAY use 400 status code on boolean {variables} parameter
  36. 4763 MAY use 400 status code on array {variables} parameter
  37. 2EA1 MUST allow map {variables} parameter when accepting application/graphql-response+json
  38. 28B9 MUST allow map {variables} parameter when accepting application/json
  39. D6D5 MAY allow URL-encoded JSON string {variables} parameter in GETs when accepting application/graphql-response+json
  40. 6A70 MAY allow URL-encoded JSON string {variables} parameter in GETs when accepting application/json
  41. 0280 MUST use 4xx or 5xx status codes on string {extensions} parameter when accepting application/graphql-response+json
  42. 0281 MUST use 4xx or 5xx status codes on number {extensions} parameter when accepting application/graphql-response+json
  43. 0282 MUST use 4xx or 5xx status codes on boolean {extensions} parameter when accepting application/graphql-response+json
  44. 0283 MUST use 4xx or 5xx status codes on array {extensions} parameter when accepting application/graphql-response+json
  45. 2330 SHOULD use 4xx status code on string {extensions} parameter when accepting application/graphql-response+json
  46. 2331 SHOULD use 4xx status code on number {extensions} parameter when accepting application/graphql-response+json
  47. 2332 SHOULD use 4xx status code on boolean {extensions} parameter when accepting application/graphql-response+json
  48. 2333 SHOULD use 4xx status code on array {extensions} parameter when accepting application/graphql-response+json
  49. 58B0 SHOULD use 4xx or 5xx status codes on string {extensions} parameter when accepting application/json
  50. 58B1 SHOULD use 4xx or 5xx status codes on number {extensions} parameter when accepting application/json
  51. 58B2 SHOULD use 4xx or 5xx status codes on boolean {extensions} parameter when accepting application/json
  52. 58B3 SHOULD use 4xx or 5xx status codes on array {extensions} parameter when accepting application/json
  53. 428F MUST allow map {extensions} parameter when accepting application/graphql-response+json
  54. 1B7A MUST allow map {extensions} parameter when accepting application/json
  55. B6DC MAY use 4xx or 5xx status codes on JSON parsing failure
  56. BCF8 MAY use 400 status code on JSON parsing failure
  57. 8764 MAY use 4xx or 5xx status codes if parameters are invalid
  58. 3E3A MAY use 400 status code if parameters are invalid
  59. 572B SHOULD use 200 status code on document parsing failure when accepting application/json
  60. FDE2 SHOULD use 200 status code on document validation failure when accepting application/json
  61. 7B9B SHOULD use a status code of 200 on variable coercion failure when accepting application/json
  62. 865D MUST use 4xx or 5xx status codes on document parsing failure when accepting application/graphql-response+json
  63. 556A SHOULD use 400 status code on document parsing failure when accepting application/graphql-response+json
  64. D586 SHOULD not contain the data entry on document parsing failure when accepting application/graphql-response+json
  65. 51FE MUST use 4xx or 5xx status codes on document validation failure when accepting application/graphql-response+json
  66. 74FF SHOULD use 400 status code on document validation failure when accepting application/graphql-response+json
  67. 5E5B SHOULD not contain the data entry on document validation failure when accepting application/graphql-response+json
  68. 86EE SHOULD use a status code of 400 on variable coercion failure when accepting application/graphql-response+json