8.1.0

Disabled insecure default for CORS allowed origins

The default value opened up GraphQL server for javascript access from all origins with the wildcard operator. This has been disabled. Instead you need to specifically configure the allowed origins (comma separated to configure multiple domains). You could use the wildcard operator again if you really want to, but this is not recommended.

graphql.servet.cors.allowed-origins = http://some.domain.com

Allow graphql.GraphQL.Builder#doNotAddDefaultInstrumentations to be set

Instead of a specific property we've introduced an object that can be used to configure the GraphQL.Builder just before it's used to build the GraphQL insteance. This can be achieved by exposing a GraphQLBuilderConfigurer bean, e.g.

@Component
class DisableDefaultInstrumentationsConfigurer implements GraphQLBuilderConfigurer {
  @Override
  public void configure(GraphQL.Builder builder) {
    builder.doNotAddDefaultInstrumentations();
  }
}

Add support for GraphiQL header editor #441

GraphiQL now supports a header editor. We've upgraded the GraphiQL version to this one to add support for it. You can still use the header configuration through properties. Those will be combined and visible in the header editor once enabled:

graphiql:
  props:
    variables:
      headerEditorEnabled: true

For all supported GraphiQL props see: https://github.com/graphql/graphiql/tree/main/packages/graphiql#options.

Other changes

• Update graphql-java-servlet to 10.1.0: https://github.com/graphql-java-kickstart/graphql-java-servlet/releases/tag/v10.1.0
• Update graphql-java-tools to 6.3.0: https://github.com/graphql-java-kickstart/graphql-java-tools/releases/tag/6.3.0
• Upgrade bundled playground to 1.7.26
• Can't cast to dataFetchingEnvironment.getContext() to graphql.kickstart.spring.GraphQLSpringServerWebExchangeContext #426
• Migrate all tests to JUnit 5 / AssertJ #480
• Upgraded to Gradle 6.7
• No location, path, extensions When graphql.servlet.exception-handlers-enabled Set to true #478
• GraphQLTestTemplate: post() Should Be Public #475
• Feature/fix test subscription reset #472
• Update GraphQLController to use ObjectMapper to map ExecutionResult #471
• Support Async Timeout Property in GraphQLServletProperties #469
• Failed to load subscription client when CDN is enabled #463
• Add fluent API support for test template and response #443
• Provided SubscriptionExecutionStrategy is not used #430
• Add graphQL endpoint template resolve as in graphiql controller. #412
• Deprecated introspectionEnabled but new property not accepted #402
• GraphQLResponseCache support
• tracing-enabled: metrics-only fails to start #392
• Subscription does not handle properly NonNullableFieldWasNullException #378
• Bug? instrumentExecutionContext not called for subscriptions #358

8.0.0

• Graphql-Java 15.0 support #457, see related release notes: https://github.com/graphql-java/graphql-java/releases/tag/v15.0

7.2.0

• Support for graphql-java-annotations #5
• graphql-tools example uses deprecated jackson-datatype-jsr310 module #415
• Unable to run spring-boot-webflux sample #428
• chore: update Gradle to 6.5, Spring Boot to 2.3.1 and other dependencies #422
• Wrong Altair version for static package #433
• fix: GraphQLTestSubscription test failing #436
• No location and path in error response #453

7.1.0

• Update graphql-java-servlet and graphql-java-tools dependencies
• Update to graphql-java 14.1
• Cannot set objectMapperConfigurer #405
• Scope of transitive dependencies #403
• Add @conditionalOnBean to GraphQLSpringWebfluxAutoConfiguration #396
• graphql-spring-boot-starter webflux not pulling in all dependencies #393
• GraphQLErrorHandler not working after updating from 6.0.1 to 7.0.1 #390
• Altair Basepath not found after update to 7.0.1 #383
• Custom implementation of GraphQLErrorHandler no longer supported? #379
• Any way to configure allowedOrigins on the graphql servlet for Cors requests? #376
• altair.static.basePath not recognized in STS4 #331
• File upload does not work with altair #262
• GraphiQL "subscriptionsClient.subscribe is not a function" #220

7.0.1

• Update graphql-java-servlet to 9.1.0
• Update graphql-java-tools to 6.0.2. to fix maven dependency issue #371
• Renamed base packages to graphql.kickstart
• Fix voyager autoconfiguration #374
• Added auto-complete support for graphql.playground.enabled #369

7.0.0

Thanks to all contributors this release contains the following fixes and improvements.

• Upgraded graphql-java to 14.0
• Updated dependencies to latest especially graphql-java-tools
• Voyager now supports webflux #355
• Added ability to specify SchemaParserOptions.Builder options that can't be coerced using application properties so that one does not need to override the build entirely to add to the schema parser options #350
• Added reactor subscription example
• Added support for testing with graphql fragments
• Made tracingLevel config value a type of String instead of Boolean to fix #239
• Refactored GraphQL controller
• Added method to type-safely get List of objects #320
• Allow errorHandlerSupplier to re-init #305
• Removed @configuration from GraphQLServletProperties #274
• Build script improvements, Gradle upgrade to 6.2.2

6.0.1

Upgraded graphql-java-servlet to 9.0.1 to fix erroneous calculation of content-length.

6.0.0

New features

• Created a starter for Spring Webflux: graphql-kickstart-spring-boot-starter-webflux. Supports subscriptions through websockets, but no support for batched queries at the moment.
• Extracted separate starter for GraphQL Java Tools: graphql-kickstart-spring-boot-starter-tools

Breaking changes

• Upgraded graphql-java-servlet to 9.0.0
• Removed the dependency on commons.io.

5.10.0

Thanks to the contributors this release contains the following changes:

• Upgraded graphql-java-servlet to 8.0.0
• Upgraded graphql-java-tools to 5.6.1
• Updated sample for argument directive #188
• Added Playground starter as alternative to GraphiQL #212
• GraphiQL "subscriptionsClient.subscribe is not a function" #220
• Setting editorTheme property does not change theme #235
• Path variables in graphql mapping #246
• Introspection-enabled doen't work #247
• Regression in Altrairs altair.static.basePath #252
• GraphiQL starter is not compatible with Spring security #253
• GraphQLErrorHandlerFactory scans for beans with request scope and dies #254
• env.getCodeRegistry() is null #255
• Allowed auto configuration with custom schema provider (fixes #192)

5.9.0

Thanks to the contributors this release contains the following changes:

• Upgraded graphql-java-servlet to v7.5.0
• Upgrade Altair to v2.1.7
• Bugfix setting altairBaseUrl properly
• Added option to enable full tracing metrics with tracing disabled
• Added metrics for websocket sessions and subscriptions and added usage to README