@graphql-yoga/plugin-apq/cjs/index.js

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.useAPQ = exports.createInMemoryAPQStore = exports.hashSHA256 = void 0;
const graphql_1 = require("graphql");
const tiny_lru_1 = require("tiny-lru");
async function hashSHA256(str, api = globalThis) {
    const { crypto, TextEncoder } = api;
    const textEncoder = new TextEncoder();
    const utf8 = textEncoder.encode(str);
    const hashBuffer = await crypto.subtle.digest('SHA-256', utf8);
    let hashHex = '';
    for (const bytes of new Uint8Array(hashBuffer)) {
        hashHex += bytes.toString(16).padStart(2, '0');
    }
    return hashHex;
}
exports.hashSHA256 = hashSHA256;
function createInMemoryAPQStore(options = {}) {
    return (0, tiny_lru_1.lru)(options.max ?? 1000, options.ttl ?? 36000);
}
exports.createInMemoryAPQStore = createInMemoryAPQStore;
function decodeAPQExtension(input) {
    if (input != null &&
        typeof input === 'object' &&
        input?.version === 1 &&
        typeof input?.sha256Hash === 'string') {
        return input;
    }
    return null;
}
function useAPQ(options = {}) {
    const { store = createInMemoryAPQStore(), hash = hashSHA256 } = options;
    return {
        async onParams({ params, setParams, fetchAPI }) {
            const persistedQueryData = decodeAPQExtension(params.extensions?.persistedQuery);
            if (persistedQueryData === null) {
                return;
            }
            if (params.query == null) {
                const persistedQuery = await store.get(persistedQueryData.sha256Hash);
                if (persistedQuery == null) {
                    throw new graphql_1.GraphQLError('PersistedQueryNotFound', {
                        extensions: {
                            http: {
                                status: 404,
                            },
                        },
                    });
                }
                setParams({
                    ...params,
                    query: persistedQuery,
                });
            }
            else {
                const expectedHash = await hash(params.query, fetchAPI);
                if (persistedQueryData.sha256Hash !== expectedHash) {
                    throw new graphql_1.GraphQLError('PersistedQueryMismatch', {
                        extensions: {
                            http: {
                                status: 400,
                            },
                        },
                    });
                }
                await store.set(persistedQueryData.sha256Hash, params.query);
            }
        },
    };
}
exports.useAPQ = useAPQ;