b30d43f983
Task 12-13 of portal-shell data abstraction plan (M3 security). APQ (Automatic Persisted Queries): - Add createPersistedQueryLink with sha256 to apollo-client.ts - Production: client sends only query hash, not plaintext query - Dev: NEXT_PUBLIC_APOLLO_APQ=false to disable for debugging - Prevents attackers from crafting arbitrary queries via DevTools PQ Manifest generator: - New scripts/generate-pq-manifest.ts iterates operations barrel - Outputs public/pq-manifest.json (sha256 -> query text whitelist) - prebuild hook: codegen + generate-pq-manifest before next build - 51 queries currently registered - crypto-hash dependency added - typecheck + lint (0 errors) + test (85/85) verified
54 lines
1.6 KiB
JSON
54 lines
1.6 KiB
JSON
{
|
|
"name": "@edu/portal-shell",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"scripts": {
|
|
"dev": "next dev -p 4010",
|
|
"build": "next build",
|
|
"start": "next start -p 4010",
|
|
"lint": "eslint src",
|
|
"lint:tokens": "eslint -c .eslintrc.tokens.js src",
|
|
"typecheck": "tsc --noEmit",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest",
|
|
"codegen": "tsx scripts/normalize-schema.ts && graphql-codegen --config codegen.yml",
|
|
"codegen:watch": "graphql-codegen --config codegen.yml --watch",
|
|
"generate-pq-manifest": "tsx scripts/generate-pq-manifest.ts",
|
|
"prebuild": "pnpm run codegen && pnpm run generate-pq-manifest"
|
|
},
|
|
"dependencies": {
|
|
"@apollo/client": "^3.11.0",
|
|
"@edu/hooks": "workspace:*",
|
|
"@edu/ui-components": "workspace:*",
|
|
"@edu/ui-tokens": "workspace:*",
|
|
"crypto-hash": "^4.0.1",
|
|
"graphql": "^16.8.0",
|
|
"next": "^14.2.0",
|
|
"react": "^18.3.0",
|
|
"react-dom": "^18.3.0",
|
|
"swr": "^2.2.0",
|
|
"zustand": "^4.5.0"
|
|
},
|
|
"devDependencies": {
|
|
"@graphql-codegen/cli": "^5.0.0",
|
|
"@graphql-codegen/typescript": "^4.0.0",
|
|
"@graphql-codegen/typescript-document-nodes": "^4.0.0",
|
|
"@graphql-codegen/typescript-operations": "^4.0.0",
|
|
"@testing-library/jest-dom": "^6.4.0",
|
|
"@testing-library/react": "^16.0.0",
|
|
"@types/node": "^22.0.0",
|
|
"@types/react": "^18.3.0",
|
|
"@types/react-dom": "^18.3.0",
|
|
"@vitejs/plugin-react": "^4.3.0",
|
|
"autoprefixer": "^10.4.0",
|
|
"eslint": "^9.0.0",
|
|
"eslint-config-prettier": "^9.1.0",
|
|
"jsdom": "^25.0.0",
|
|
"postcss": "^8.4.0",
|
|
"tailwindcss": "^3.4.0",
|
|
"tsx": "^4.0.0",
|
|
"typescript": "^5.6.0",
|
|
"vitest": "^2.0.0"
|
|
}
|
|
}
|