no-auth-on-introspection-query-graphql.ts

const isItIntrospectionQuery = (query: string): boolean => {
  return query.includes('IntrospectionQuery')
}

const postgraphileOptions = {
  async pgSettings(req: Request) {
    if (isItIntrospectionQuery(JSON.stringify(req.body))) return {}

    return {
      role: 'DATABASE_VISITOR',
      ...['your', 'return']
    }
  },
  async additionalGraphQLContextFromRequest(req) {
    if (isItIntrospectionQuery(JSON.stringify(req.body))) return {}

    return {
      ...['your', 'return']
    }
  }
}