New/Breaking:
- Built-in GraphiQL! If enabled by providing the option
graphiql: true, when visiting your express-graphql endpoint from a browser, you will load GraphiQL allowing for easier debugging of queries. (#16) - Non-query operations no longer allowed via GET requests. Performing a mutation over GET could allow for potentially dangerous CSRF attacks. express-graphql now ensures mutations are only executed in a POST request. (#18)
- Expects a peer dependency of graphql of version ^0.4.5
Fixes:
- Better handling of pre-parsed POST bodies. (#11)
- Correct mime type for JSON