GraphQL queries: questões de segurança e performance

• Autor(a) principal: Monteiro, Luís Bruno Vieira
• Data de Publicação: 2022
• Tipo de documento: Dissertação
• Idioma: eng
• Título da fonte: Repositório Científico de Acesso Aberto de Portugal (Repositórios Cientìficos)
• Texto Completo: http://hdl.handle.net/10400.22/20730
• topic: GraphQL; Queries; Expensive; Cost; Analysis; Security

As web applications continue to grow, the need for these applications to adapt to the needs of the client is more important. Applications like mobile and web require efficient responses. The search for alternatives to the very popular REST APIs gains more interest. One popular approach is GraphQL. GraphQL addresses both the flexibility and performance concerns that can occur in RESTFul APIs by allowing users to request the data as they need it. With this flexibility, security and performance concerns become more and more relevant. This work aims to explore how can these concerns be answered by analysing queries and deciding if they are safe to be answered or not. Always having in mind that the performance should not be affected. One of the conclusions found is that the implementation of a simpler strategy is fundamental to any GrahQL API since it provides a minimum level of security without compromising performance. However, the use of a more complex approach offers better results, without having any major disadvantage.