* This report was auto-generated by graphql-http
GraphQL over HTTP audit report
- 60 audits in total
- ✅ 60 pass
Passing
22EB SHOULD accept application/graphql-response+json and match the content-type4655 MUST accept application/json and match the content-type47DE SHOULD accept */* and use application/json for the content-type80D8 SHOULD assume application/json content-type when accept is missing82A3 MUST use utf-8 encoding when respondingBF61 MUST accept utf-8 encoded request78D5 MUST assume utf-8 in request if encoding is unspecified2C94 MUST accept POST requests5A70 MAY accept application/x-www-form-urlencoded formatted GET requests9C48 MAY NOT allow executing mutations on GET requests9ABE MAY respond with 4xx status code if content-type is not supplied on POST requests03D4 MUST accept application/json POST requestsA5BF MAY use 400 status code when request body is missing on POST423L MAY use 400 status code on missing {query} parameterLKJ0 MAY use 400 status code on object {query} parameterLKJ1 MAY use 400 status code on number {query} parameterLKJ2 MAY use 400 status code on boolean {query} parameterLKJ3 MAY use 400 status code on array {query} parameter34A2 SHOULD allow string {query} parameter when accepting application/graphql-response+json13EE MUST allow string {query} parameter when accepting application/json6C00 MAY use 400 status code on object {operationName} parameter6C01 MAY use 400 status code on number {operationName} parameter6C02 MAY use 400 status code on boolean {operationName} parameter6C03 MAY use 400 status code on array {operationName} parameter8161 SHOULD allow string {operationName} parameter when accepting application/graphql-response+jsonB8B3 MUST allow string {operationName} parameter when accepting application/json94B0 SHOULD allow null {variables} parameter when accepting application/graphql-response+json0220 MUST allow null {variables} parameter when accepting application/json94B1 SHOULD allow null {operationName} parameter when accepting application/graphql-response+json0221 MUST allow null {operationName} parameter when accepting application/json94B2 SHOULD allow null {extensions} parameter when accepting application/graphql-response+json0222 MUST allow null {extensions} parameter when accepting application/json4760 MAY use 400 status code on string {variables} parameter4761 MAY use 400 status code on number {variables} parameter4762 MAY use 400 status code on boolean {variables} parameter4763 MAY use 400 status code on array {variables} parameter2EA1 SHOULD allow map {variables} parameter when accepting application/graphql-response+json28B9 MUST allow map {variables} parameter when accepting application/jsonD6D5 MAY allow URL-encoded JSON string {variables} parameter in GETs when accepting application/graphql-response+json6A70 MAY allow URL-encoded JSON string {variables} parameter in GETs when accepting application/json58B0 MAY use 400 status code on string {extensions} parameter58B1 MAY use 400 status code on number {extensions} parameter58B2 MAY use 400 status code on boolean {extensions} parameter58B3 MAY use 400 status code on array {extensions} parameter428F SHOULD allow map {extensions} parameter when accepting application/graphql-response+json1B7A MUST allow map {extensions} parameter when accepting application/jsonB6DC MAY use 4xx or 5xx status codes on JSON parsing failureBCF8 MAY use 400 status code on JSON parsing failure8764 MAY use 4xx or 5xx status codes if parameters are invalid3E3A MAY use 400 status code if parameters are invalid572B SHOULD use 200 status code on document parsing failure when accepting application/jsonFDE2 SHOULD use 200 status code on document validation failure when accepting application/json7B9B SHOULD use a status code of 200 on variable coercion failure when accepting application/json865D SHOULD use 4xx or 5xx status codes on document parsing failure when accepting application/graphql-response+json556A SHOULD use 400 status code on document parsing failure when accepting application/graphql-response+jsonD586 SHOULD not contain the data entry on document parsing failure when accepting application/graphql-response+json51FE SHOULD use 4xx or 5xx status codes on document validation failure when accepting application/graphql-response+json74FF SHOULD use 400 status code on document validation failure when accepting application/graphql-response+json5E5B SHOULD not contain the data entry on document validation failure when accepting application/graphql-response+json86EE SHOULD use a status code of 400 on variable coercion failure when accepting application/graphql-response+json