Using Persisted Operations with Federated GraphQL - WunderGraph

Overview

Persisted Operations, also known as Trusted Documents or Persisted Queries, allow you to register GraphQL Operations on the Router. This way, you can execute an operation by its identifier instead of sending the whole operation to the router on each query, reducing bandwidth requirements and increasing security. This is also known as Operation Safelisting.

Prerequisites

Write an Operation

Let’s start by writing an operation in our playground. The easiest way to open it is to use Cosmo Studio. Navigate to your federated graph’s Playground by clicking its link in the sidebar.

Opening the Cosmo Studio playground

Now type and execute the following operation:

query {
  employees {
    id
  }
}

The router will return a list of IDs for every employee in the subgraph.

{
  "data": {
    "employees": [\
      {\
        "id": 1\
      },\
      ...\
      {\
        "id": 12\
      }\
    ]
  }
}

To get ourselves familiar with curl, let’s also execute this operation using the command line:

# This assumes your router is running on 127.0.0.1:3002
curl 'http://127.0.0.1:3002/graphql' \
    --json '{"query":"query { employees { id } }"}'

Register a persisted operation

Now let’s turn this query into a persisted operation. To register persisted operations, we will use wgc, which we installed in the prerequisites step. Open a text editor and create a file named employees.graphql with the operation body that we previously used:

# employees.graphql
query {
  employees {
    id
  }
}

To register the operation, run:

wgc operations push production -c curl -f employees.graphql

There are a few things to note from this command:

Apollo Persited Queries manifest

Relay QueryMap

Now run the command and notice its output. It will show how many operations were pushed, along with their status (created or up to date).

pushed operation 2d9df67f96ce804da7a9107d33373132a53bf56aec29ef4b4e06569a43a16935 (created)
pushed 1 operations: 1 created, 0 up to date

Write down the ID of the operation, which might be different than the one in the example, because we will use it later.

Execute a persisted operation

Now that we’ve pushed an operation, let’s execute it. To make things simple, we’ll use curl to run the operation. So, instead of sending the operation contents, we will send its identifier. Run the following command, indicating the client name (in the graphql-client-name header) and the operation identifier (in the payload):

# This assumes your router is running on 127.0.0.1:3002
curl 'http://127.0.0.1:3002/graphql' \
    -H 'graphql-client-name: curl' \
    --json '{"extensions":{"persistedQuery":{"version":1,"sha256Hash":"2d9df67f96ce804da7a9107d33373132a53bf56aec29ef4b4e06569a43a16935"}}}'

This will return the same data as executing the operation by returning its contents.

Using the PQL Manifest

Instead of having the router fetch each persisted operation individually from the CDN on each request, you can enable the PQL manifest. In this mode, the router loads all persisted operations from a single manifest.json file at startup and serves them. Add the following to your router configuration:

persisted_operations:
  manifest:
    enabled: true

The manifest is automatically kept in sync with the Cosmo CDN whenever you push or delete operations. The router polls for updates and hot-reloads without a restart. You can also load the manifest from a custom storage provider (e.g. S3-compatible storage) instead of the Cosmo CDN. For details, see PQL Manifest.

Further information