Skip to content

Latest commit

 

History

History
73 lines (69 loc) · 5.99 KB

File metadata and controls

73 lines (69 loc) · 5.99 KB

* This report was auto-generated by graphql-http

GraphQL over HTTP audit report

  • 60 audits in total
  • 60 pass

Passing

  1. 22EB SHOULD accept application/graphql-response+json and match the content-type
  2. 4655 MUST accept application/json and match the content-type
  3. 47DE SHOULD accept */* and use application/json for the content-type
  4. 80D8 SHOULD assume application/json content-type when accept is missing
  5. 82A3 MUST use utf-8 encoding when responding
  6. BF61 MUST accept utf-8 encoded request
  7. 78D5 MUST assume utf-8 in request if encoding is unspecified
  8. 2C94 MUST accept POST requests
  9. 5A70 MAY accept application/x-www-form-urlencoded formatted GET requests
  10. 9C48 MAY NOT allow executing mutations on GET requests
  11. 9ABE MAY respond with 4xx status code if content-type is not supplied on POST requests
  12. 03D4 MUST accept application/json POST requests
  13. A5BF MAY use 400 status code when request body is missing on POST
  14. 423L MAY use 400 status code on missing {query} parameter
  15. LKJ0 MAY use 400 status code on object {query} parameter
  16. LKJ1 MAY use 400 status code on number {query} parameter
  17. LKJ2 MAY use 400 status code on boolean {query} parameter
  18. LKJ3 MAY use 400 status code on array {query} parameter
  19. 34A2 SHOULD allow string {query} parameter when accepting application/graphql-response+json
  20. 13EE MUST allow string {query} parameter when accepting application/json
  21. 6C00 MAY use 400 status code on object {operationName} parameter
  22. 6C01 MAY use 400 status code on number {operationName} parameter
  23. 6C02 MAY use 400 status code on boolean {operationName} parameter
  24. 6C03 MAY use 400 status code on array {operationName} parameter
  25. 8161 SHOULD allow string {operationName} parameter when accepting application/graphql-response+json
  26. B8B3 MUST allow string {operationName} parameter when accepting application/json
  27. 94B0 SHOULD allow null {variables} parameter when accepting application/graphql-response+json
  28. 0220 MUST allow null {variables} parameter when accepting application/json
  29. 94B1 SHOULD allow null {operationName} parameter when accepting application/graphql-response+json
  30. 0221 MUST allow null {operationName} parameter when accepting application/json
  31. 94B2 SHOULD allow null {extensions} parameter when accepting application/graphql-response+json
  32. 0222 MUST allow null {extensions} parameter when accepting application/json
  33. 4760 MAY use 400 status code on string {variables} parameter
  34. 4761 MAY use 400 status code on number {variables} parameter
  35. 4762 MAY use 400 status code on boolean {variables} parameter
  36. 4763 MAY use 400 status code on array {variables} parameter
  37. 2EA1 SHOULD allow map {variables} parameter when accepting application/graphql-response+json
  38. 28B9 MUST allow map {variables} parameter when accepting application/json
  39. D6D5 MAY allow URL-encoded JSON string {variables} parameter in GETs when accepting application/graphql-response+json
  40. 6A70 MAY allow URL-encoded JSON string {variables} parameter in GETs when accepting application/json
  41. 58B0 MAY use 400 status code on string {extensions} parameter
  42. 58B1 MAY use 400 status code on number {extensions} parameter
  43. 58B2 MAY use 400 status code on boolean {extensions} parameter
  44. 58B3 MAY use 400 status code on array {extensions} parameter
  45. 428F SHOULD allow map {extensions} parameter when accepting application/graphql-response+json
  46. 1B7A MUST allow map {extensions} parameter when accepting application/json
  47. B6DC MAY use 4xx or 5xx status codes on JSON parsing failure
  48. BCF8 MAY use 400 status code on JSON parsing failure
  49. 8764 MAY use 4xx or 5xx status codes if parameters are invalid
  50. 3E3A MAY use 400 status code if parameters are invalid
  51. 572B SHOULD use 200 status code on document parsing failure when accepting application/json
  52. FDE2 SHOULD use 200 status code on document validation failure when accepting application/json
  53. 7B9B SHOULD use a status code of 200 on variable coercion failure when accepting application/json
  54. 865D SHOULD use 4xx or 5xx status codes on document parsing failure when accepting application/graphql-response+json
  55. 556A SHOULD use 400 status code on document parsing failure when accepting application/graphql-response+json
  56. D586 SHOULD not contain the data entry on document parsing failure when accepting application/graphql-response+json
  57. 51FE SHOULD use 4xx or 5xx status codes on document validation failure when accepting application/graphql-response+json
  58. 74FF SHOULD use 400 status code on document validation failure when accepting application/graphql-response+json
  59. 5E5B SHOULD not contain the data entry on document validation failure when accepting application/graphql-response+json
  60. 86EE SHOULD use a status code of 400 on variable coercion failure when accepting application/graphql-response+json