If you haven't yet heard, the Black Hat GraphQL book is officially out! if you ever wanted to learn #GraphQL hacking, this is the book for you. Ton of great #hacking tips and tricks. 25% off with the code PREORDER.
blackhatgraphql.com
How to grab all Graphql query/mutation if introspection disabled?
1. Download all js files to directory js_files
2. Run this command:
grep -Eo '(query|mutation) [a-zA-Z0-9_]+\(' js_files -R
1/n
#bugbountytips#graphql
🚨 NEW THING 🚨
Want to get into #GraphQL?
Learn with my new interactive tutorial, Try GraphQL! 🎉
trygql.com
✅ Query Basics
✅ Subfields
✅ Lists
✅ Arguments
✅ Variables
✅ Fragments
✅ Aliases
✅ Query from JavaScript
✅ Query from React
RTs appreciated! 🙌
If you ♥️ #Hasura, Hasura Con'20 is THE place to tell the world why!
Talk ideas 🎤
🏗 Use-cases, products built with Hasura
🤯 Hasura insights, tooling or tips & tricks
🤝 Product integrations
💪 Community
Submit a talk👉bit.ly/hasura-con-cfp#HasuraCon20#GraphQL
Day 80 of #100DaysOfCode - Started working with #GraphQL! 😃Created a #NodeJS server & schema file that defines types, relationships, & RootQueries. The RootQuery is your API's entry point, kind of like a REST endpoint. It describes how to interact with the graph to return data.
Launching my side project called Saffron!
💻 Store your recipes online
📔 Organize them into cookbooks
🔍 Search by recipe title, ingredient, or author
🔗 Link between recipes
✨ View recipes clutter free
built with #GraphQL#TypeScript#reactjsmysaffronapp.com/
So I kinda teased that #graphql DX thing that was coming... I made a little teaser video for y'all!
Note that the result of useQuery is automatically typed without code-generation and that the LSP is helping you with all things GraphQL!
Happy to announce what I've been working on recently, a collection of my learnings on how to design the best #GraphQL APIs! If you've enjoyed my posts recently, you should enjoy this book: book.graphqlschemadesign.com…
It would mean a lot to me if you would subscribe for updates ❤️
We're happy to announce the the #graphql#swift library entering official SSWG review! Maturity review helps users be confident in libraries and helps the longlevity of the server ecosystem.
Thank you Jay for the proposal!
Review thread: forums.swift.org/t/sswg-0019…
Blind #SQLInjection on #GraphQL
The API accepts queries for user "gender" data and accepts 3 keywords "M,F,NA", I found the parader "xxxkeyword_xx_xx" is vulnerable to blind-SQL injection attacks using my fav payload: "0\"XOR(if(now()=sysdate(),sleep(9),0))XOR\"Z", #BugBounty
🤓 Common #GraphQL API Design Mistake 🔥
**Sharing types**
It's tempting to reuse types when they represent similar entities. For example team members can be "Users", just like the current authenticated viewer is a "User".
Truth is that they're maybe not the same thing 👇
My team at Apollo has been working on new software to help #GraphQL devs navigate schemas and write queries *much* more easily and it's blowing my mind 🔥
If you want to see what's coming... check out our pre-release repo and share your thoughts with us!
github.com/apollographql/apo…