nginx-disable-graphql-introspection

Disable GraphQL Introspection in Nginx using JS Module

Install Nginx js module: https://docs.nginx.com/nginx/admin-guide/dynamic-modules/nginscript/

Load js module into your .conf:

load_module modules/ngx_http_js_module.so;

wrap server with http:

http {

   ....
   server {
     ....
   }

}

in http scope, import the js file

js_import /etc/nginx/njs/introspect.js;

Add upstream to your Graphql backend

   # http scope
   upstream backend {
       # graphql server
       server localhost:8080;
   }
   
   # server scope
     location @app-backend {
       proxy_pass http://backend;
     }

validate all of requests with js code

     location / {
       js_content introspect.disableSchema;
     }