Configure advanced security

This section is about the security property of configureWunderGraphApplication.

configureWunderGraphApplication({
  security: {
    enableGraphQLEndpoint: true,
    allowedHosts: ['localhost:3000'],
  },
});

Setting this to true will enable the GraphQL endpoint. This means that the WunderGraph server will expose a GraphQL endpoint at /graphql. If you open this endpoint in the browser, you will see the GraphQL Playground, which can be used to explore the GraphQL schema and try out GraphQL Operations.

The WunderGraph Server / WunderNode can be restricted to only allow certain hosts to access it. What this means is that the router of the WunderGraph Server will look at the Host header of the incoming request, and if it doesn't match the allowed hosts, it will return a 404 Not Found response.