Patch vm2 npm package

v1.2.4

Patch vm2 npm package

Configure isAlive timeout

v1.2.3

Configurable isAlive timeout

Added status endpoint to registry

• Added the status endpoint to registry that returns the metadata file for the resource group and validates that policy attachments exist for all opa policies, returning an array of the policies that have missing attachments

• Fixed a bug in anonymous strategy authentication that included querystring as a part of the path

Introspection query policy - types fix

Introspection query policy is used like a BasePolicy, hence it needs to use the same types.

Introspection query policy

Currently stitch exposes GRAPHQL_INTROSPECTION with a default of true.
Enabling the introspection query in production is a security vulnerability in some use cases, so we want to control access to the introspection query using a policy instead.

This change adds the introspectionQueryPolicy resource type, which can be added same to the base policy via cli or the registry graphql gateway.

If the introspection query is not provided, it will be allowed by default (assuming GRAPHQL_INTROSPECTION is true).

Policies with queries with policies with args with defaults

Fix: Policy with query that contains another policy with default args…

… (#336)

Content-Type filtering & configurable prometheus histogram buckets

v1.1.0

Configurable request and resolver duration histogram metrics (#335)

Auth strategies for registry

Different levels for child loggers (#328)

* Different levels for child loggers

* Use createChildLogger

* Fix tests

* E2E test for child logger level

* More logs for policies

* Docs

* More child loggers

* Child logger level in blackbox tests

postResolve policies

v0.6.2

Combo of changes related to policy validation (#323)

Fix @localResolver merge strategy

v0.6.1

Fix @localResolver merge strategy bug (#321)