Not using Lacinia, but where I work we’ve limited access to introspection queries only to users with staff access
@hlship is right - introspection is a big part of why GraphQL (and GraphiQL in particular) is great.
fwiw I'm planning to disable introspection as well. Non-staff clients will use a persisted query. I think/hope I can do both with a custom pedestal interceptor.
I think someone should add an issue to lacinia to introduce an option to disable introspection.
I made an issue in Lacinia. Thanks for being receptive!
Awesome, this is the change I had in mind. Thanks.