Is there a recommended way of enabling introspection on a per request basis?

[lolopinto]

I want to enable introspection dynamically. what's the best way to do that?

right now, it seems introspection has to be enabled all or nothing and I'd like to check based on the request and then configure GraphQL based on that.

using my own handler and calling configure in each doesn't quite work because there could be multiple requests at the same time. The best way I have so far is to expose a different endpoint and a different instance of GraphQL there and perform the check in a custom GraphQLHTTPHandler's handle_request method but that doesn't seem elegant.

[rafalp]

What do you mean by introspection by query? Do you want to let people introspect some of introspection fields but not others?

[lolopinto]

Sorry, should have said introspection by request. I want to define introspection based on request. E.g. doing a launchdarkly or statsig check based on IP

…

On Tue, Feb 27, 2024 at 10:12 Rafał Pitoń ***@***.***> wrote: What do you mean by introspection by query? Do you want to let people introspect some of introspection fields but not others? — Reply to this email directly, view it on GitHub <#1168 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACS2VN2EUCEUGYAV2UHS3GTYVYOXXAVCNFSM6AAAAABD3RJKJKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DMMBYHE4TK> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[rafalp]

I am afraid I still don't understand what you are after? "launchdarkly" and "statsig" doesn't tell me anything.

[lolopinto]

Right now, introspection is configured on a per-route basis and the introspection flag is passed to the http handler and all the way down to the graphql function.

So that value persists across all requests as far as I can tell.

I want to configure it on a per request basis. I'm asking how to do that.

[rafalp]

So you want third party services to be able to introspect your schema, but not the other clients?

[rafalp]

Leave introspection enabled, but use custom get_validation_rules to conditionally return (IntrospectionDisabledRule, ) if context["request"] fails to match.

You can import IntrospectionDisabledRule from ariadne.validation.introspection_disabled

[lolopinto]

that works! thanks!