delta/gitlab/gitlab-ce.git/spec/controllers/graphql_controller_spec.rb, branch tracking-performance

Propagate argument errors as execution errors

2019-07-30T15:12:24+00:00

Add API access check to Graphql

2019-03-27T14:59:02+00:00

Check if user can access API on GraphqlController

Allow GraphQL requests without CSRF token

2019-03-06T14:38:00+00:00

With this we allow authentication using a session or using personal
access token.

Authentication using a session, and CSRF token makes it easy to play
with GraphQL from the Graphiql endpoint we expose.

But we cannot enforce CSRF validity, otherwise authentication for
regular API clients would fail when they use personal access tokens to
authenticate.

Update specs to rails5 format

2018-12-18T23:04:31+00:00

Updates specs to use new rails5 format.

The old format:
`get :show, { some: params }, { some: headers }`

The new format:
`get :show, params: { some: params }, headers: { some: headers }`

Merge branch 'security-fix-pat-web-access' into 'master'

2018-11-29T00:13:59+00:00

[master] Resolve "Personal access token with only `read_user` scope can be used to authenticate any web request"

See merge request gitlab/gitlabhq!2583

Handle exceptions outside the GraphQL schema

2018-06-05T18:47:42+00:00

This allows us to report JSON parse exceptions to clients and ignore
them in sentry.

Add a minimal GraphQL API

2018-06-05T18:47:42+00:00