httpServerTests.ts

// This file contains the original integration test suite dating back to the
// Apollo Server 1 days where there wasn't even an ApolloServer object. The
// individual tests just talk to the http.Server returned from their createApp
// function. Newer tests have generally been added to the apolloServerTests.ts
// file.
import { createHash } from '@apollo/utils.createhash';
import resolvable, { type Resolvable } from '@josephg/resolvable';
import {
  BREAK,
  DocumentNode,
  getIntrospectionQuery,
  getOperationAST,
  GraphQLError,
  GraphQLInt,
  GraphQLNonNull,
  GraphQLObjectType,
  GraphQLScalarType,
  GraphQLSchema,
  GraphQLString,
  ValidationContext,
} from 'graphql';
import gql from 'graphql-tag';
import { InMemoryLRUCache, KeyValueCache } from '@apollo/utils.keyvaluecache';
import superagent, { type HTTPError } from 'superagent';
import request from 'supertest';
import type {
  CreateServerForIntegrationTests,
  CreateServerForIntegrationTestsOptions,
} from './index.js';
import type {
  ApolloServer,
  ApolloServerOptions,
  BaseContext,
  GraphQLRequestContextWillSendResponse,
  GraphQLRequestListener,
  PersistedQueryOptions,
} from '@apollo/server';
import { HeaderMap } from '@apollo/server';
import { ApolloServerPluginCacheControl } from '@apollo/server/plugin/cacheControl';
import { ApolloServerPluginCacheControlDisabled } from '@apollo/server/plugin/disabled';
import {
  jest,
  it,
  describe,
  expect,
  beforeEach,
  afterEach,
} from '@jest/globals';
import type { Mock, SpyInstance } from 'jest-mock';
import { cacheControlFromInfo } from '@apollo/cache-control-types';
import {
  ApolloServerErrorCode,
  unwrapResolverError,
} from '@apollo/server/errors';

const QueryRootType = new GraphQLObjectType({
  name: 'QueryRoot',
  fields: {
    test: {
      type: GraphQLString,
      args: {
        who: {
          type: GraphQLString,
        },
      },
      resolve: (_, args) => 'Hello ' + (args['who'] || 'World'),
    },
    thrower: {
      type: new GraphQLNonNull(GraphQLString),
      resolve: () => {
        throw new Error('Throws!');
      },
    },
    custom: {
      type: GraphQLString,
      args: {
        foo: {
          type: new GraphQLScalarType({
            name: 'Foo',
            serialize: (v) => v,
            parseValue: () => {
              throw new Error('Something bad happened');
            },
            parseLiteral: () => {
              throw new Error('Something bad happened');
            },
          }),
        },
      },
    },
    context: {
      type: GraphQLString,
      resolve: (_obj, _args, context) => context,
    },
  },
});

const TestSchema = new GraphQLSchema({
  query: QueryRootType,
  mutation: new GraphQLObjectType({
    name: 'MutationRoot',
    fields: {
      writeTest: {
        type: QueryRootType,
        resolve: () => ({}),
      },
    },
  }),
});

const personType = new GraphQLObjectType({
  name: 'PersonType',
  fields: {
    firstName: {
      type: GraphQLString,
    },
    lastName: {
      type: GraphQLString,
    },
  },
});

const queryType = new GraphQLObjectType({
  name: 'QueryType',
  fields: {
    testString: {
      type: GraphQLString,
      resolve() {
        return 'it works';
      },
    },
    testPerson: {
      type: personType,
      resolve() {
        return { firstName: 'Jane', lastName: 'Doe' };
      },
    },
    testPersonWithCacheControl: {
      type: personType,
      resolve(_source, _args, _context, info) {
        cacheControlFromInfo(info).setCacheHint({ maxAge: 11 });
        return { firstName: 'Jane', lastName: 'Doe' };
      },
    },
    testStringWithDelay: {
      type: GraphQLString,
      args: {
        delay: { type: new GraphQLNonNull(GraphQLInt) },
      },
      resolve(_, args) {
        return new Promise((resolve) => {
          setTimeout(() => resolve('it works'), args['delay']);
        });
      },
    },
    testContext: {
      type: GraphQLString,
      resolve(_parent, _args, context) {
        if (context.otherField) {
          return 'unexpected';
        }
        context.otherField = true;
        return context.testField;
      },
    },
    testRootValue: {
      type: GraphQLString,
      resolve(rootValue) {
        return rootValue;
      },
    },
    testArgument: {
      type: GraphQLString,
      args: { echo: { type: GraphQLString } },
      resolve(_, { echo }) {
        return `hello ${echo}`;
      },
    },
    testError: {
      type: GraphQLString,
      resolve() {
        throw new MyError('Secret error message');
      },
    },
    testGraphQLError: {
      type: GraphQLString,
      resolve() {
        throw new MyGraphQLError('Secret error message');
      },
    },
    testGraphQLErrorWithHTTP1: {
      type: GraphQLString,
      resolve() {
        throw new GraphQLError('error 1', {
          extensions: {
            http: { status: 402 },
          },
        });
      },
    },
    testGraphQLErrorWithHTTP2: {
      type: GraphQLString,
      resolve() {
        throw new GraphQLError('error 2', {
          extensions: {
            http: { headers: new HeaderMap([['erroneous', 'indeed']]) },
          },
        });
      },
    },
    testGraphQLErrorWithHTTP3: {
      type: GraphQLString,
      resolve() {
        throw new GraphQLError('error 3', {
          extensions: {
            http: { headers: new HeaderMap([['felonious', 'nah']]) },
          },
        });
      },
    },
  },
});

class MyError extends Error {}
class MyGraphQLError extends GraphQLError {}

const mutationType = new GraphQLObjectType({
  name: 'MutationType',
  fields: {
    testMutation: {
      type: GraphQLString,
      args: { echo: { type: GraphQLString } },
      resolve(_, { echo }) {
        return `not really a mutation, but who cares: ${echo}`;
      },
    },
    testPerson: {
      type: personType,
      args: {
        firstName: {
          type: new GraphQLNonNull(GraphQLString),
        },
        lastName: {
          type: new GraphQLNonNull(GraphQLString),
        },
      },
      resolve(_, args) {
        return args;
      },
    },
    testRootValue: {
      type: GraphQLString,
      resolve(rootValue) {
        return rootValue;
      },
    },
  },
});

const schema = new GraphQLSchema({
  query: queryType,
  mutation: mutationType,
});

export function defineIntegrationTestSuiteHttpServerTests(
  createServer: CreateServerForIntegrationTests,
  options: {
    serverIsStartedInBackground?: boolean;
    noIncrementalDelivery?: boolean;
  } = {},
) {
  describe('httpServerTests.ts', () => {
    let didEncounterErrors: Mock<
      NonNullable<GraphQLRequestListener<BaseContext>['didEncounterErrors']>
    >;

    let serverToCleanUp: ApolloServer | null = null;
    let extraCleanup: (() => Promise<void>) | null = null;

    async function createApp(
      config?: ApolloServerOptions<BaseContext>,
      options?: CreateServerForIntegrationTestsOptions,
    ): Promise<string> {
      const serverInfo = await createServer(config ?? { schema }, options);
      serverToCleanUp = serverInfo.server;
      extraCleanup = serverInfo.extraCleanup ?? null;
      return serverInfo.url;
    }

    // This will get called at the end of each test, and also tests
    // which want to test stop() behavior can call it themselves (so it's OK to call
    // it more than once).
    async function stopServer() {
      try {
        await serverToCleanUp?.stop();
        await extraCleanup?.();
      } finally {
        serverToCleanUp = null;
        extraCleanup = null;
      }
    }
    afterEach(stopServer);

    describe('graphqlHTTP', () => {
      it('rejects the request if the method is not POST or GET', async () => {
        const app = await createApp();
        const req = request(app)
          .head('/')
          // Make sure we get the error we're looking for, not the CSRF
          // prevention error :)
          .set('apollo-require-preflight', 't')
          .send();
        return req.then((res) => {
          expect(res.status).toEqual(405);
          expect(res.headers['allow']).toEqual('GET, POST');
        });
      });

      it('throws an error if POST body is empty', async () => {
        const app = await createApp();
        const res = await request(app)
          .post('/')
          .type('text/plain')
          .set('apollo-require-preflight', 't')
          .send('  ');
        expect(res.status).toEqual(400);
      });

      it('throws an error if POST body is missing even with content-type', async () => {
        const app = await createApp();
        const res = await request(app)
          .post('/')
          .type('application/json')
          .send();
        expect(res.status).toEqual(400);
      });

      it('throws an error if invalid content-type', async () => {
        const app = await createApp();
        const req = request(app)
          .post('/')
          .type('text/plain')
          .set('apollo-require-preflight', 't')
          .send(
            JSON.stringify({
              query: 'query test{ testString }',
            }),
          );
        return req.then((res) => {
          expect(res.status).toEqual(400);
          expect((res.error as HTTPError).text).toMatch('invalid Content-Type');
        });
      });

      it('throws an error if POST operation is missing', async () => {
        const app = await createApp();
        const req = request(app).post('/').send({});
        return req.then((res) => {
          expect(res.status).toEqual(400);
          expect((res.error as HTTPError).text).toMatch('has no keys');
        });
      });

      it('throws an error if POST operation is empty', async () => {
        const app = await createApp();
        const req = request(app).post('/').send({ query: '' });
        return req.then((res) => {
          expect(res.status).toEqual(400);
          expect((res.error as HTTPError).text).toMatch('non-empty `query`');
        });
      });

      it('throws an error if POST JSON is malformed', async () => {
        const app = await createApp();
        const req = request(app)
          .post('/')
          .type('application/json')
          .send('{foo');
        return req.then((res) => {
          expect(res.status).toEqual(400);
          expect(
            ['Unexpected token f', 'Bad Request', 'Invalid JSON'].some(
              (substring) => (res.error as HTTPError).text.includes(substring),
            ),
          ).toBe(true);
        });
      });

      it('returns an error on parse failure', async () => {
        const app = await createApp();
        const res = await request(app).post('/').send({
          query: `{`,
        });

        expect(res.status).toEqual(400);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "errors": [
              {
                "extensions": {
                  "code": "GRAPHQL_PARSE_FAILED",
                },
                "locations": [
                  {
                    "column": 2,
                    "line": 1,
                  },
                ],
                "message": "Syntax Error: Expected Name, found <EOF>.",
              },
            ],
          }
        `);
      });

      it('returns an error on validation failure', async () => {
        const app = await createApp();
        const res = await request(app).post('/').send({
          query: `{ hello }`,
        });

        expect(res.status).toEqual(400);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "errors": [
              {
                "extensions": {
                  "code": "GRAPHQL_VALIDATION_FAILED",
                },
                "locations": [
                  {
                    "column": 3,
                    "line": 1,
                  },
                ],
                "message": "Cannot query field "hello" on type "QueryType".",
              },
            ],
          }
        `);
      });

      it('unknown operation name returns 400 and OPERATION_RESOLUTION_FAILURE', async () => {
        const app = await createApp();
        const res = await request(app).post('/').send({
          query: `query BadName { testString }`,
          operationName: 'NotBadName',
        });

        expect(res.status).toEqual(400);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "errors": [
              {
                "extensions": {
                  "code": "OPERATION_RESOLUTION_FAILURE",
                },
                "message": "Unknown operation named "NotBadName".",
              },
            ],
          }
        `);
      });

      it('unknown operation name returns 400 and OPERATION_RESOLUTION_FAILURE for GET requests', async () => {
        const app = await createApp();
        const res = await request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query({
            query: `query BadName { testString }`,
            operationName: 'NotBadName',
          });

        expect(res.status).toEqual(400);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "errors": [
              {
                "extensions": {
                  "code": "OPERATION_RESOLUTION_FAILURE",
                },
                "message": "Unknown operation named "NotBadName".",
              },
            ],
          }
        `);
      });

      it('throwing in didResolveOperation results in error with default HTTP status code', async () => {
        const app = await createApp({
          schema,
          plugins: [
            {
              async requestDidStart() {
                return {
                  async didResolveOperation() {
                    throw new GraphQLError('error with default status');
                  },
                };
              },
            },
          ],
        });
        const res = await request(app)
          .post('/')
          .send({ query: `{ testString }` });
        expect(res.status).toEqual(500);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "errors": [
              {
                "extensions": {
                  "code": "INTERNAL_SERVER_ERROR",
                },
                "message": "error with default status",
              },
            ],
          }
        `);
      });

      it('throwing in didResolveOperation results in error with specified HTTP status code', async () => {
        const app = await createApp({
          schema,
          plugins: [
            {
              async requestDidStart() {
                return {
                  async didResolveOperation() {
                    throw new GraphQLError('error with another status', {
                      extensions: { http: { status: 401 }, code: 'OH_NO' },
                    });
                  },
                };
              },
            },
          ],
        });
        const res = await request(app)
          .post('/')
          .send({ query: `{ testString }` });
        expect(res.status).toEqual(401);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "errors": [
              {
                "extensions": {
                  "code": "OH_NO",
                },
                "message": "error with another status",
              },
            ],
          }
        `);
      });

      it('multiple operations with no `operationName` specified returns 400 and OPERATION_RESOLUTION_FAILURE', async () => {
        const app = await createApp();
        const res = await request(app)
          .post('/')
          .send({
            query: `
            query One { testString }
            query Two { testString }
          `,
          });

        expect(res.status).toEqual(400);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "errors": [
              {
                "extensions": {
                  "code": "OPERATION_RESOLUTION_FAILURE",
                },
                "message": "Must provide operation name if query contains multiple operations.",
              },
            ],
          }
        `);
      });

      it('throws an error if GET query is missing', async () => {
        const app = await createApp();
        const res = await request(app)
          .get(`/`)
          .set('apollo-require-preflight', 't');
        expect(res.status).toEqual(400);
        expect(JSON.parse((res.error as HTTPError).text))
          .toMatchInlineSnapshot(`
          {
            "errors": [
              {
                "extensions": {
                  "code": "BAD_REQUEST",
                },
                "message": "GraphQL operations must contain a non-empty \`query\` or a \`persistedQuery\` extension.",
              },
            ],
          }
        `);
      });

      it('can handle a basic GET request', async () => {
        const app = await createApp();
        const expected = {
          testString: 'it works',
        };
        const query = {
          query: 'query test{ testString }',
        };
        const req = request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query(query);
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual(expected);
        });
      });

      it('GET request with array body is not interpreted as batch', async () => {
        const app = await createApp({ schema, allowBatchedHttpRequests: true });
        const res = await request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .set('content-type', 'application/json')
          .query({ query: '{ testString }' })
          .send('[1, 2]');
        expect(res.status).toEqual(200);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "data": {
              "testString": "it works",
            },
          }
        `);
      });

      it('can handle a basic implicit GET request', async () => {
        const app = await createApp();
        const expected = {
          testString: 'it works',
        };
        const query = {
          query: '{ testString }',
        };
        const req = request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query(query);
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual(expected);
        });
      });

      it('throws error if trying to use mutation using GET request', async () => {
        didEncounterErrors = jest.fn();
        const app = await createApp({
          schema,
          plugins: [
            {
              async requestDidStart() {
                return { didEncounterErrors };
              },
            },
          ],
        });
        const query = {
          query: 'mutation test{ testMutation(echo: "ping") }',
        };
        const req = request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query(query);

        await req.then((res) => {
          expect(res.status).toEqual(405);
          expect(res.headers['allow']).toEqual('POST');
          expect(res.body).toMatchInlineSnapshot(`
            {
              "errors": [
                {
                  "extensions": {
                    "code": "BAD_REQUEST",
                  },
                  "message": "GET requests only support query operations, not mutation operations",
                },
              ],
            }
          `);
        });

        expect(didEncounterErrors).toBeCalledWith(
          expect.objectContaining({
            errors: expect.arrayContaining([
              expect.objectContaining({
                message:
                  'GET requests only support query operations, not mutation operations',
              }),
            ]),
          }),
        );
      });

      it('throws error if trying to use mutation with fragment using GET request', async () => {
        didEncounterErrors = jest.fn();
        const app = await createApp({
          schema,
          plugins: [
            {
              async requestDidStart() {
                return { didEncounterErrors };
              },
            },
          ],
        });
        const query = {
          query: `fragment PersonDetails on PersonType {
              firstName
            }

            mutation test {
              testPerson(firstName: "Test", lastName: "Me") {
                ...PersonDetails
              }
            }`,
        };
        const req = request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query(query);
        await req.then((res) => {
          expect(res.status).toEqual(405);
          expect(res.headers['allow']).toEqual('POST');
          expect(res.body).toMatchInlineSnapshot(`
            {
              "errors": [
                {
                  "extensions": {
                    "code": "BAD_REQUEST",
                  },
                  "message": "GET requests only support query operations, not mutation operations",
                },
              ],
            }
          `);
        });

        expect(didEncounterErrors).toBeCalledWith(
          expect.objectContaining({
            errors: expect.arrayContaining([
              expect.objectContaining({
                message:
                  'GET requests only support query operations, not mutation operations',
              }),
            ]),
          }),
        );
      });

      it('does not accept multiple query search parameters', async () => {
        const app = await createApp();
        const res = await request(app)
          // cspell:ignore Bfoo Bbar
          .get('/?query=%7Bfoo%7D&query=%7Bbar%7D')
          .set('apollo-require-preflight', 't')
          .send();
        expect(res.status).toEqual(400);
        expect(res.text).toMatch(
          "The 'query' search parameter may only be specified once",
        );
      });

      it('can handle a GET request with variables', async () => {
        const app = await createApp();
        const query = {
          query: 'query test($echo: String){ testArgument(echo: $echo) }',
          variables: JSON.stringify({ echo: 'world' }),
        };
        const expected = {
          testArgument: 'hello world',
        };
        const req = request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query(query);
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual(expected);
        });
      });

      it('can handle a basic request', async () => {
        let requestIsBatched: boolean | undefined;
        const app = await createApp({
          schema,
          allowBatchedHttpRequests: true,
          plugins: [
            {
              async requestDidStart(requestContext) {
                requestIsBatched = requestContext.requestIsBatched;
              },
            },
          ],
        });
        const expected = {
          testString: 'it works',
        };
        const res = await request(app).post('/').send({
          query: 'query test{ testString }',
        });
        expect(res.status).toEqual(200);
        // This default may change by 2025 according to the graphql-over-http spec.
        expect(res.headers['content-type']).toBe(
          'application/json; charset=utf-8',
        );
        expect(res.body.data).toEqual(expected);
        expect(requestIsBatched).toEqual(false);
      });

      it.each([
        ['application/json', 'application/json; charset=utf-8'],
        ['application/json; charset=utf-8', 'application/json; charset=utf-8'],
        [
          'application/graphql-response+json',
          'application/graphql-response+json; charset=utf-8',
        ],
        [
          'application/graphql-response+json; charset=utf-8',
          'application/graphql-response+json; charset=utf-8',
        ],
        [
          'application/graphql-response+json, application/json',
          'application/graphql-response+json; charset=utf-8',
        ],
        [
          'application/json, application/graphql-response+json',
          'application/json; charset=utf-8',
        ],
        [
          'application/json; q=0.5, application/graphql-response+json',
          'application/graphql-response+json; charset=utf-8',
        ],
      ])(
        'can handle a basic request accepting %s',
        async (accept, expectedContentType) => {
          const app = await createApp();
          const expected = {
            testString: 'it works',
          };
          const res = await request(app).post('/').set('accept', accept).send({
            query: 'query test{ testString }',
          });
          expect(res.status).toEqual(200);
          expect(res.headers['content-type']).toBe(expectedContentType);
          expect(res.body.data).toEqual(expected);
        },
      );

      // Apollo Server doesn't calculate content-length itself because most web
      // frameworks (eg, Express if you use res.send, Lambda, etc) add them
      // automatically if you send your response as one chunk (which we do: see
      // HTTPGraphQLResponse.completeBody). If your framework doesn't, you
      // should calculate it yourself (with Buffer.byteLength, not string
      // length) so that this test passes.
      it('responses have content-length headers', async () => {
        const app = await createApp();
        const expected = {
          testArgument: 'hello 🧡💘💚',
        };
        const res = await request(app).post('/').send({
          query: '{ testArgument(echo: "🧡💘💚") }',
        });
        expect(res.status).toEqual(200);
        expect(res.body.data).toEqual(expected);
        expect(res.headers['content-length']).toEqual(
          Buffer.byteLength(res.text).toString(),
        );
      });

      describe('cache-control', () => {
        const books = [
          {
            title: 'H',
            author: 'J',
          },
        ];

        const typeDefs = gql`
          type Book {
            title: String
            author: String
          }

          type Cook @cacheControl(maxAge: 200) {
            title: String
            author: String
          }

          type Pook @cacheControl(maxAge: 200) {
            title: String
            books: [Book] @cacheControl(maxAge: 20, scope: PRIVATE)
          }

          type Query {
            books: [Book]
            cooks: [Cook]
            pooks: [Pook]
            uncached: ID
            ten: ID @cacheControl(maxAge: 10)
            twenty: ID @cacheControl(maxAge: 20, scope: PRIVATE)
          }

          enum CacheControlScope {
            PUBLIC
            PRIVATE
          }

          directive @cacheControl(
            maxAge: Int
            scope: CacheControlScope
          ) on FIELD_DEFINITION | OBJECT | INTERFACE
        `;

        const resolvers = {
          Query: {
            books: () => books,
            cooks: () => books,
            pooks: () => [{ title: 'pook', books }],
          },
        };

        it('applies cacheControl Headers', async () => {
          const app = await createApp({ typeDefs, resolvers });
          const res = await request(app).post('/').send({
            query: `{ cooks { title author } }`,
          });
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual({ cooks: books });
          expect(res.headers['cache-control']).toEqual('max-age=200, public');
        });

        it('applies cacheControl Headers for batched operation', async () => {
          const app = await createApp({
            typeDefs,
            resolvers,
            allowBatchedHttpRequests: true,
          });
          {
            const res = await request(app)
              .post('/')
              .send([{ query: '{ten}' }, { query: '{twenty}' }]);
            expect(res.status).toEqual(200);
            expect(res.body).toMatchInlineSnapshot(`
            [
              {
                "data": {
                  "ten": null,
                },
              },
              {
                "data": {
                  "twenty": null,
                },
              },
            ]
          `);
            expect(res.headers['cache-control']).toEqual('max-age=10, private');
          }
          {
            const res = await request(app)
              .post('/')
              .send([{ query: '{twenty}' }, { query: '{ten}' }]);
            expect(res.status).toEqual(200);
            expect(res.body).toMatchInlineSnapshot(`
            [
              {
                "data": {
                  "twenty": null,
                },
              },
              {
                "data": {
                  "ten": null,
                },
              },
            ]
          `);
            expect(res.headers['cache-control']).toEqual('max-age=10, private');
          }
          {
            const res = await request(app)
              .post('/')
              .send([{ query: '{uncached}' }, { query: '{ten}' }]);
            expect(res.status).toEqual(200);
            expect(res.body).toMatchInlineSnapshot(`
            [
              {
                "data": {
                  "uncached": null,
                },
              },
              {
                "data": {
                  "ten": null,
                },
              },
            ]
          `);
            expect(res.headers['cache-control']).toEqual('no-store');
          }
          {
            const res = await request(app)
              .post('/')
              .send([{ query: '{ten}' }, { query: '{uncached}' }]);
            expect(res.status).toEqual(200);
            expect(res.body).toMatchInlineSnapshot(`
            [
              {
                "data": {
                  "ten": null,
                },
              },
              {
                "data": {
                  "uncached": null,
                },
              },
            ]
          `);
            expect(res.headers['cache-control']).toEqual('no-store');
          }
        });

        it('applies cacheControl Headers with if-cacheable', async () => {
          const app = await createApp({
            typeDefs,
            resolvers,
            plugins: [
              ApolloServerPluginCacheControl({
                calculateHttpHeaders: 'if-cacheable',
              }),
            ],
          });
          const res = await request(app).post('/').send({
            query: `{ cooks { title author } }`,
          });
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual({ cooks: books });
          expect(res.headers['cache-control']).toEqual('max-age=200, public');
        });

        it('contains no cacheControl Headers when uncacheable', async () => {
          const app = await createApp({ typeDefs, resolvers });
          const res = await request(app).post('/').send({
            query: `{ books { title author } }`,
          });
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual({ books });
          expect(res.headers['cache-control']).toBe('no-store');
        });

        it('contains private cacheControl Headers when scoped', async () => {
          const app = await createApp({ typeDefs, resolvers });
          const res = await request(app).post('/').send({
            query: `{ pooks { title books { title author } } }`,
          });
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual({
            pooks: [{ title: 'pook', books }],
          });
          expect(res.headers['cache-control']).toEqual('max-age=20, private');
        });

        it('runs when cache-control is disabled', async () => {
          const app = await createApp({
            typeDefs,
            resolvers,
            plugins: [ApolloServerPluginCacheControlDisabled()],
          });
          const res = await request(app).post('/').send({
            query: `{ pooks { title books { title author } } }`,
          });
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual({
            pooks: [{ title: 'pook', books }],
          });
          expect(res.headers['cache-control']).toBeUndefined();
        });
      });

      it('cache-control not set without any hints with if-cacheable', async () => {
        const app = await createApp({
          schema,
          plugins: [
            ApolloServerPluginCacheControl({
              calculateHttpHeaders: 'if-cacheable',
            }),
          ],
        });
        const expected = {
          testPerson: { firstName: 'Jane' },
        };
        const req = request(app).post('/').send({
          query: 'query test{ testPerson { firstName } }',
        });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual(expected);
          expect(res.headers['cache-control']).toBeUndefined();
        });
      });

      it('cache-control set to no-store without any hints', async () => {
        const app = await createApp({
          schema,
        });
        const expected = {
          testPerson: { firstName: 'Jane' },
        };
        const req = request(app).post('/').send({
          query: 'query test{ testPerson { firstName } }',
        });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual(expected);
          expect(res.headers['cache-control']).toBe('no-store');
        });
      });

      it('cache-control set with dynamic hint', async () => {
        const app = await createApp({
          schema,
        });
        const expected = {
          testPersonWithCacheControl: { firstName: 'Jane' },
        };
        const req = request(app).post('/').send({
          query: 'query test{ testPersonWithCacheControl { firstName } }',
        });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual(expected);
          expect(res.headers['cache-control']).toBe('max-age=11, public');
        });
      });

      it('cache-control set with defaultMaxAge', async () => {
        const app = await createApp({
          schema,
          plugins: [ApolloServerPluginCacheControl({ defaultMaxAge: 5 })],
        });
        const expected = {
          testPerson: { firstName: 'Jane' },
        };
        const req = request(app).post('/').send({
          query: 'query test{ testPerson { firstName } }',
        });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual(expected);
          expect(res.headers['cache-control']).toBe('max-age=5, public');
        });
      });

      it('returns PersistedQueryNotSupported to a GET request if PQs disabled', async () => {
        const app = await createApp({
          schema,
          persistedQueries: false,
        });
        const req = request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query({
            extensions: JSON.stringify({
              persistedQuery: {
                version: 1,
                sha256Hash:
                  'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
              },
            }),
          });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.errors).toBeDefined();
          expect(res.body.errors[0].message).toEqual(
            'PersistedQueryNotSupported',
          );
          expect(res.headers['cache-control']).toBe(
            'private, no-cache, must-revalidate',
          );
        });
      });

      it('returns PersistedQueryNotSupported to a POST request if PQs disabled', async () => {
        const app = await createApp({
          schema,
          persistedQueries: false,
        });
        const req = request(app)
          .post('/')
          .send({
            extensions: {
              persistedQuery: {
                version: 1,
                sha256Hash:
                  'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
              },
            },
          });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.errors).toBeDefined();
          expect(res.body.errors.length).toEqual(1);
          expect(res.body.errors[0].message).toEqual(
            'PersistedQueryNotSupported',
          );
          expect(res.headers['cache-control']).toBe(
            'private, no-cache, must-revalidate',
          );
        });
      });

      it('returns PersistedQueryNotFound to a GET request', async () => {
        const app = await createApp();
        const req = request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query({
            extensions: JSON.stringify({
              persistedQuery: {
                version: 1,
                sha256Hash:
                  'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
              },
            }),
          });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.errors).toBeDefined();
          expect(res.body.errors.length).toEqual(1);
          expect(res.body.errors[0].message).toEqual('PersistedQueryNotFound');
          expect(res.headers['cache-control']).toBe(
            'private, no-cache, must-revalidate',
          );
        });
      });

      it('returns PersistedQueryNotFound to a POST request', async () => {
        const app = await createApp();
        const req = request(app)
          .post('/')
          .send({
            extensions: {
              persistedQuery: {
                version: 1,
                sha256Hash:
                  'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
              },
            },
          });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.errors).toBeDefined();
          expect(res.body.errors.length).toEqual(1);
          expect(res.body.errors[0].message).toEqual('PersistedQueryNotFound');
          expect(res.headers['cache-control']).toBe(
            'private, no-cache, must-revalidate',
          );
        });
      });

      it('can handle a request with variables', async () => {
        const app = await createApp();
        const expected = {
          testArgument: 'hello world',
        };
        const req = request(app)
          .post('/')
          .send({
            query: 'query test($echo: String){ testArgument(echo: $echo) }',
            variables: { echo: 'world' },
          });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual(expected);
        });
      });

      it('POST does not handle a request with variables as string', async () => {
        const app = await createApp();
        const res = await request(app).post('/').send({
          query: 'query test($echo: String!){ testArgument(echo: $echo) }',
          variables: '{ "echo": "world" }',
        });
        expect(res.status).toEqual(400);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "errors": [
              {
                "extensions": {
                  "code": "BAD_REQUEST",
                },
                "message": "\`variables\` in a POST body should be provided as an object, not a recursively JSON-encoded string.",
              },
            ],
          }
        `);
      });

      it('POST does not handle a request with extensions as string', async () => {
        const app = await createApp();
        const res = await request(app).post('/').send({
          query: 'query test($echo: String!){ testArgument(echo: $echo) }',
          extensions: '{ "echo": "world" }',
        });
        expect(res.status).toEqual(400);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "errors": [
              {
                "extensions": {
                  "code": "BAD_REQUEST",
                },
                "message": "\`extensions\` in a POST body should be provided as an object, not a recursively JSON-encoded string.",
              },
            ],
          }
        `);
      });

      it('can handle a request with operationName', async () => {
        const app = await createApp();
        const expected = {
          testString: 'it works',
        };
        const req = request(app)
          .post('/')
          .send({
            query: `
                      query test($echo: String){ testArgument(echo: $echo) }
                      query test2{ testString }`,
            variables: { echo: 'world' },
            operationName: 'test2',
          });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual(expected);
        });
      });

      it('can handle introspection request', async () => {
        const app = await createApp();
        const req = request(app)
          .post('/')
          .send({ query: getIntrospectionQuery() });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data.__schema.types[0].fields[0].name).toEqual(
            'testString',
          );
        });
      });

      it('can handle Rover introspection request', async () => {
        const app = await createApp();
        const res = await request(app)
          .post('/')
          .set('content-type', 'application/json')
          .set('user-agent', 'tool/0.0.0')
          .set('accept', '*/*')
          .set('accept-encoding', 'gzip, br')
          .send(
            String.raw`{
          "variables": null,
          "query": "query GraphIntrospectQuery {\n  __schema {\n    queryType {\n      name\n    }\n    mutationType {\n      name\n    }\n    subscriptionType {\n      name\n    }\n    types {\n      ...FullType\n    }\n    directives {\n      name\n      description\n      locations\n      args {\n        ...InputValue\n      }\n    }\n  }\n}\n\nfragment FullType on __Type {\n  kind\n  name\n  description\n  fields(includeDeprecated: true) {\n    name\n    description\n    args {\n      ...InputValue\n    }\n    type {\n      ...TypeRef\n    }\n    isDeprecated\n    deprecationReason\n  }\n  inputFields {\n    ...InputValue\n  }\n  interfaces {\n    ...TypeRef\n  }\n  enumValues(includeDeprecated: true) {\n    name\n    description\n    isDeprecated\n    deprecationReason\n  }\n  possibleTypes {\n    ...TypeRef\n  }\n}\n\nfragment InputValue on __InputValue {\n  name\n  description\n  type {\n    ...TypeRef\n  }\n  defaultValue\n}\n\nfragment TypeRef on __Type {\n  kind\n  name\n  ofType {\n    kind\n    name\n    ofType {\n      kind\n      name\n      ofType {\n        kind\n        name\n        ofType {\n          kind\n          name\n          ofType {\n            kind\n            name\n            ofType {\n              kind\n              name\n              ofType {\n                kind\n                name\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n}",
          "operationName": "GraphIntrospectQuery"
        }`,
          );
        expect(res.status).toEqual(200);
        expect(res.body.data.__schema.queryType.name).toEqual('QueryType');
      });

      it('does not accept a query AST', async () => {
        const app = await createApp();
        const req = request(app)
          .post('/')
          .send({
            query: gql`
              query test {
                testString
              }
            `,
          });
        return req.then((res) => {
          expect(res.status).toEqual(400);
          expect(res.text).toMatch('GraphQL queries must be strings');
        });
      });

      it('can handle batch requests', async () => {
        let requestIsBatched: boolean | undefined;
        const app = await createApp({
          schema,
          allowBatchedHttpRequests: true,
          plugins: [
            {
              async requestDidStart(requestContext) {
                requestIsBatched = requestContext.requestIsBatched;
              },
            },
          ],
        });
        const expected = [
          {
            data: {
              testString: 'it works',
            },
          },
          {
            data: {
              testArgument: 'hello yellow',
            },
          },
        ];
        const res = await request(app)
          .post('/')
          .send([
            {
              query: `
                      query test($echo: String){ testArgument(echo: $echo) }
                      query test2{ testString }`,
              variables: { echo: 'world' },
              operationName: 'test2',
            },
            {
              query: `
                      query testX($echo: String){ testArgument(echo: $echo) }`,
              variables: { echo: 'yellow' },
              operationName: 'testX',
            },
          ]);
        expect(res.status).toEqual(200);
        expect(res.body).toEqual(expected);
        expect(res.header['content-length']).toEqual(
          Buffer.byteLength(res.text, 'utf8').toString(),
        );
        expect(requestIsBatched).toBe(true);
      });

      it('can handle non-batch requests when allowBatchedHttpRequests is true', async () => {
        const app = await createApp({ schema, allowBatchedHttpRequests: true });
        const expected = {
          data: {
            testString: 'it works',
          },
        };
        const req = request(app)
          .post('/')
          .send({
            query: `
                      query test($echo: String){ testArgument(echo: $echo) }
                      query test2{ testString }`,
            variables: { echo: 'world' },
            operationName: 'test2',
          });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body).toEqual(expected);
        });
      });

      it('can handle batch requests with one element', async () => {
        const app = await createApp({ schema, allowBatchedHttpRequests: true });
        const expected = [
          {
            data: {
              testString: 'it works',
            },
          },
        ];
        const req = request(app)
          .post('/')
          .send([
            {
              query: `
                      query test($echo: String){ testArgument(echo: $echo) }
                      query test2{ testString }`,
              variables: { echo: 'world' },
              operationName: 'test2',
            },
          ]);
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body).toEqual(expected);
        });
      });

      it('returns an error on batch requests with no elements', async () => {
        const app = await createApp({ schema, allowBatchedHttpRequests: true });
        const req = request(app).post('/').send([]);
        return req.then((res) => {
          expect(res.status).toEqual(400);
          expect(res.body).toMatchInlineSnapshot(`
            {
              "errors": [
                {
                  "extensions": {
                    "code": "BAD_REQUEST",
                  },
                  "message": "No operations found in request.",
                },
              ],
            }
          `);
        });
      });

      it('can handle batch requests in parallel', async function () {
        const parallels = 100;
        const delayPerReq = 40;

        const app = await createApp({ schema, allowBatchedHttpRequests: true });
        const expected = Array(parallels).fill({
          data: { testStringWithDelay: 'it works' },
        });
        const req = request(app)
          .post('/')
          .send(
            Array(parallels).fill({
              query: `query test($delay: Int!) { testStringWithDelay(delay: $delay) }`,
              operationName: 'test',
              variables: { delay: delayPerReq },
            }),
          );
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body).toEqual(expected);
        });
      }, 3000); // this test will fail due to timeout if running serially.

      it('disables batch requests by default', async () => {
        const app = await createApp();

        const res = await request(app)
          .post('/')
          .send([
            {
              query: `
                      query test($echo: String){ testArgument(echo: $echo) }
                      query test2{ testString }`,
              variables: { echo: 'world' },
              operationName: 'test2',
            },
            {
              query: `
                      query testX($echo: String){ testArgument(echo: $echo) }`,
              variables: { echo: 'yellow' },
              operationName: 'testX',
            },
          ]);

        expect(res.status).toEqual(400);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "errors": [
              {
                "extensions": {
                  "code": "BAD_REQUEST",
                },
                "message": "Operation batching disabled.",
              },
            ],
          }
        `);
      });

      it('clones batch context', async () => {
        const app = await createApp(
          {
            schema,
            allowBatchedHttpRequests: true,
          },
          { context: async () => ({ testField: 'expected' }) },
        );
        const expected = [
          {
            data: {
              testContext: 'expected',
            },
          },
          {
            data: {
              testContext: 'expected',
            },
          },
        ];
        const req = request(app)
          .post('/')
          .send([
            {
              query: 'query test{ testContext }',
            },
            {
              query: 'query test{ testContext }',
            },
          ]);
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body).toEqual(expected);
        });
      });

      it('executes batch context if it is a function', async () => {
        let callCount = 0;
        const app = await createApp(
          {
            schema,
            allowBatchedHttpRequests: true,
          },
          {
            context: async () => {
              callCount++;
              return { testField: 'expected' };
            },
          },
        );
        const expected = [
          {
            data: {
              testContext: 'expected',
            },
          },
          {
            data: {
              testContext: 'expected',
            },
          },
        ];
        const req = request(app)
          .post('/')
          .send([
            {
              query: 'query test{ testContext }',
            },
            {
              query: 'query test{ testContext }',
            },
          ]);
        return req.then((res) => {
          // XXX In AS 1.0 we ran context once per GraphQL operation (so this
          // was 2) rather than once per HTTP request. Was this actually
          // helpful? Honestly we're not sure why you'd use a function in the
          // 1.0 API anyway since the function didn't actually get any useful
          // arguments. Right now there's some weirdness where a context
          // function is actually evaluated both inside ApolloServer and in
          // runHttpQuery.
          expect(callCount).toEqual(1);
          expect(res.status).toEqual(200);
          expect(res.body).toEqual(expected);
        });
      });

      it('can handle a request with a mutation', async () => {
        const app = await createApp();
        const expected = {
          testMutation: 'not really a mutation, but who cares: world',
        };
        const req = request(app)
          .post('/')
          .send({
            query: 'mutation test($echo: String){ testMutation(echo: $echo) }',
            variables: { echo: 'world' },
          });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data).toEqual(expected);
        });
      });

      it('willSendResponse can be equivalent to the old formatResponse function', async () => {
        const app = await createApp({
          schema,
          plugins: [
            {
              async requestDidStart() {
                return {
                  async willSendResponse(
                    requestContext: GraphQLRequestContextWillSendResponse<BaseContext>,
                  ) {
                    if (!('singleResult' in requestContext.response.body)) {
                      throw Error('expected single result');
                    }
                    requestContext.response.body.singleResult.extensions = {
                      it: 'works',
                    };
                  },
                };
              },
            },
          ],
        });
        const expected = { it: 'works' };
        const req = request(app)
          .post('/')
          .send({
            query: 'mutation test($echo: String){ testMutation(echo: $echo) }',
            variables: { echo: 'world' },
          });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.extensions).toEqual(expected);
        });
      });

      it('passes the context to the resolver', async () => {
        const expected = 'context works';
        const app = await createApp(
          {
            schema,
          },
          { context: async () => ({ testField: expected }) },
        );
        const req = request(app).post('/').send({
          query: 'query test{ testContext }',
        });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data.testContext).toEqual(expected);
        });
      });

      it('passes the rootValue to the resolver', async () => {
        const expected = 'it passes rootValue';
        const app = await createApp({
          schema,
          rootValue: expected,
        });
        const req = request(app).post('/').send({
          query: 'query test{ testRootValue }',
        });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.data.testRootValue).toEqual(expected);
        });
      });

      it('passes the rootValue function result to the resolver', async () => {
        const expectedQuery = 'query: it passes rootValue';
        const expectedMutation = 'mutation: it passes rootValue';
        const app = await createApp({
          schema,
          rootValue: (documentNode: DocumentNode) => {
            const op = getOperationAST(documentNode, undefined);
            return op!.operation === 'query' ? expectedQuery : expectedMutation;
          },
        });
        const queryRes = await request(app).post('/').send({
          query: 'query test{ testRootValue }',
        });
        expect(queryRes.status).toEqual(200);
        expect(queryRes.body.data.testRootValue).toEqual(expectedQuery);

        const mutationRes = await request(app).post('/').send({
          query: 'mutation test{ testRootValue }',
        });
        expect(mutationRes.status).toEqual(200);
        expect(mutationRes.body.data.testRootValue).toEqual(expectedMutation);
      });

      it('returns errors', async () => {
        const expected = 'Secret error message';
        const app = await createApp({
          schema,
        });
        const req = request(app).post('/').send({
          query: 'query test{ testError }',
        });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.errors[0].message).toEqual(expected);
        });
      });

      it('applies formatError if provided', async () => {
        const expected = '--blank--';
        const app = await createApp({
          schema,
          formatError: (_, error) => {
            expect(error instanceof Error).toBe(true);
            return { message: expected };
          },
        });
        const req = request(app).post('/').send({
          query: 'query test{ testError }',
        });
        return req.then((res) => {
          expect(res.status).toEqual(200);
          expect(res.body.errors[0].message).toEqual(expected);
        });
      });

      it('formatError receives error that can be unwrapped to pass instanceof checks', async () => {
        const expected = '--blank--';
        let error: unknown;
        const app = await createApp({
          schema,
          formatError: (_, e) => {
            error = e;
            return { message: expected };
          },
        });
        const res = await request(app).post('/').send({
          query: 'query test{ testError }',
        });
        expect(res.status).toEqual(200);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "data": {
              "testError": null,
            },
            "errors": [
              {
                "message": "--blank--",
              },
            ],
          }
        `);
        expect(error).toBeInstanceOf(GraphQLError);
        expect(error).toHaveProperty('path');
        expect(unwrapResolverError(error)).toBeInstanceOf(MyError);
      });

      it('formatError receives error that passes instanceof checks when GraphQLError', async () => {
        const expected = '--blank--';
        let error: unknown;
        const app = await createApp({
          schema,
          formatError: (_, e) => {
            error = e;
            return { message: expected };
          },
        });
        const res = await request(app).post('/').send({
          query: 'query test{ testGraphQLError }',
        });
        expect(res.status).toEqual(200);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "data": {
              "testGraphQLError": null,
            },
            "errors": [
              {
                "message": "--blank--",
              },
            ],
          }
        `);
        expect(error).toBeInstanceOf(GraphQLError);
        // This is the locatedError so it's not our error.
        expect(error).not.toBeInstanceOf(MyGraphQLError);
        expect(error).toHaveProperty('path');
        expect(unwrapResolverError(error)).toBeInstanceOf(MyGraphQLError);
      });

      it('GraphQLError HTTP extensions are respected and stripped', async () => {
        const app = await createApp({
          schema,
        });
        const res = await request(app).post('/').send({
          query:
            'query test{ testGraphQLErrorWithHTTP1 testGraphQLErrorWithHTTP2 testGraphQLErrorWithHTTP3 }',
        });
        expect(res.status).toEqual(402);
        expect(res.headers.erroneous).toBe('indeed');
        expect(res.headers.felonious).toBe('nah');
        expect(res.body).toMatchInlineSnapshot(`
          {
            "data": {
              "testGraphQLErrorWithHTTP1": null,
              "testGraphQLErrorWithHTTP2": null,
              "testGraphQLErrorWithHTTP3": null,
            },
            "errors": [
              {
                "extensions": {
                  "code": "INTERNAL_SERVER_ERROR",
                },
                "locations": [
                  {
                    "column": 13,
                    "line": 1,
                  },
                ],
                "message": "error 1",
                "path": [
                  "testGraphQLErrorWithHTTP1",
                ],
              },
              {
                "extensions": {
                  "code": "INTERNAL_SERVER_ERROR",
                },
                "locations": [
                  {
                    "column": 39,
                    "line": 1,
                  },
                ],
                "message": "error 2",
                "path": [
                  "testGraphQLErrorWithHTTP2",
                ],
              },
              {
                "extensions": {
                  "code": "INTERNAL_SERVER_ERROR",
                },
                "locations": [
                  {
                    "column": 65,
                    "line": 1,
                  },
                ],
                "message": "error 3",
                "path": [
                  "testGraphQLErrorWithHTTP3",
                ],
              },
            ],
          }
        `);
      });

      it('formatError receives correct error for parse failure', async () => {
        const expected = '--blank--';
        let gotCorrectCode = false;
        const app = await createApp({
          schema,
          formatError: (_, error) => {
            gotCorrectCode =
              (error as any).extensions.code ===
              ApolloServerErrorCode.GRAPHQL_PARSE_FAILED;
            return { message: expected };
          },
        });
        const res = await request(app).post('/').send({
          query: '}',
        });
        expect(res.status).toEqual(400);
        expect(res.body).toMatchInlineSnapshot(`
          {
            "errors": [
              {
                "message": "--blank--",
              },
            ],
          }
        `);
        expect(gotCorrectCode).toBe(true);
      });

      it('allows for custom error formatting to sanitize', async () => {
        const app = await createApp({
          schema: TestSchema,
          formatError(error) {
            return { message: 'Custom error format: ' + error.message };
          },
        });

        const response = await request(app).post('/').send({
          query: '{thrower}',
        });

        expect(response.status).toEqual(200);
        expect(JSON.parse(response.text)).toEqual({
          data: null,
          errors: [
            {
              message: 'Custom error format: Throws!',
            },
          ],
        });
      });

      it('allows for custom error formatting to elaborate', async () => {
        const app = await createApp({
          schema: TestSchema,
          formatError(error) {
            return {
              message: error.message,
              locations: error.locations,
              stack: 'Stack trace',
            };
          },
        });

        const response = await request(app).post('/').send({
          query: '{thrower}',
        });

        expect(response.status).toEqual(200);
        expect(JSON.parse(response.text)).toEqual({
          data: null,
          errors: [
            {
              message: 'Throws!',
              locations: [{ line: 1, column: 2 }],
              stack: 'Stack trace',
            },
          ],
        });
      });

      it('sends internal server error when formatError fails', async () => {
        const app = await createApp({
          schema,
          formatError: () => {
            throw new Error('I should be caught');
          },
        });
        const req = request(app).post('/').send({
          query: 'query test{ testError }',
        });
        return req.then((res) => {
          const error = res.body.errors[0];
          expect(error).toEqual({
            message: 'Internal server error',
            extensions: { code: 'INTERNAL_SERVER_ERROR' },
          });
        });
      });

      it('applies additional validationRules', async () => {
        const expected = 'alwaysInvalidRule was really invalid!';
        const alwaysInvalidRule = function (context: ValidationContext) {
          return {
            enter() {
              context.reportError(new GraphQLError(expected));
              return BREAK;
            },
          };
        };
        const app = await createApp({
          schema,
          validationRules: [alwaysInvalidRule],
        });
        const req = request(app).post('/').send({
          query: 'query test{ testString }',
        });
        return req.then((res) => {
          expect(res.status).toEqual(400);
          expect(res.body.errors[0].message).toEqual(expected);
        });
      });
    });

    if (options.serverIsStartedInBackground) {
      // This tests the behavior designed for serverless frameworks that ensures
      // that startup finishes before serving a request. We don't have to worry
      // about this for non-serverless frameworks because you should have
      // already done `await server.start()` before calling (eg)
      // `expressMiddleware`.
      it('calls serverWillStart before serving a request', async () => {
        // We'll use this to determine the order in which
        // the events we're expecting to happen actually occur and validate
        // those expectations in various stages of this test.
        const calls: string[] = [];

        const pluginStartedBarrier = resolvable();
        const letPluginFinishBarrier = resolvable();

        // Create the server. This test only runs when
        // serverIsStartedInBackground, so this serverWillStart plugin will run
        // "in the background".
        const url = await createApp({
          schema,
          plugins: [
            {
              async serverWillStart() {
                calls.push('zero');
                pluginStartedBarrier.resolve();
                await letPluginFinishBarrier;
                calls.push('one');
              },
            },
          ],
        });

        // Intentionally fire off the request asynchronously, without await.
        const res = request(url)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query({
            query: 'query test{ testString }',
          })
          .then((res) => {
            calls.push('two');
            return res;
          });

        // At this point calls might be [] or ['zero'] because we are starting
        // in the background. We can safely wait on the plugin's serverWillStart
        // to begin.
        await pluginStartedBarrier;
        expect(calls).toEqual(['zero']);
        letPluginFinishBarrier.resolve();

        // Now, wait for the request to finish.
        await res;

        // Finally, ensure that the order we expected was achieved.
        expect(calls).toEqual(['zero', 'one', 'two']);
      });
    }

    describe('status code', () => {
      it('allows setting a custom status code', async () => {
        const app = await createApp({
          schema,
          plugins: [
            {
              async requestDidStart() {
                return {
                  async willSendResponse({ response: { http } }) {
                    http!.status = 403;
                  },
                };
              },
            },
          ],
        });

        const req = request(app).post('/').send({
          query: 'query test{ testString }',
        });
        return req.then((res) => {
          expect(res.status).toEqual(403);
          expect(res.body.data).toEqual({
            testString: 'it works',
          });
        });
      });
    });

    // Some servers (like Lambda) do not support streaming responses, so there's
    // no point in implementing incremental delivery.
    (options.noIncrementalDelivery ? describe.skip : describe)(
      'incremental delivery',
      () => {
        const typeDefs = `#graphql
      directive @defer(if: Boolean! = true, label: String) on FRAGMENT_SPREAD | INLINE_FRAGMENT
      type Query {
        testString: String
        barrierString: String
      }
      `;

        // These tests mock out execution, so that we can test the incremental
        // delivery transport even if we're built against graphql@16.
        describe('mocked execution', () => {
          it('basic @defer working', async () => {
            const app = await createApp({
              typeDefs,
              __testing_incrementalExecutionResults: {
                initialResult: {
                  hasNext: true,
                  data: { first: 'it works' },
                },
                subsequentResults: (async function* () {
                  yield {
                    hasNext: false,
                    incremental: [
                      { path: [], data: { testString: 'it works' } },
                    ],
                  };
                })(),
              },
            });
            const res = await request(app)
              .post('/')
              .set(
                'accept',
                'multipart/mixed; deferSpec=20220824, application/json',
              )
              // disables supertest's use of formidable for multipart
              .parse(superagent.parse.text)
              .send({
                query: '{ first: testString ... @defer { testString } }',
              });
            expect(res.status).toEqual(200);
            expect(res.header['content-type']).toMatchInlineSnapshot(
              `"multipart/mixed; boundary="-"; deferSpec=20220824"`,
            );
            expect(res.text).toMatchInlineSnapshot(`
              "
              ---
              content-type: application/json; charset=utf-8

              {"hasNext":true,"data":{"first":"it works"}}
              ---
              content-type: application/json; charset=utf-8

              {"hasNext":false,"incremental":[{"path":[],"data":{"testString":"it works"}}]}
              -----
              "
            `);
          });

          it('first payload sent while deferred field is blocking', async () => {
            const gotFirstChunkBarrier = resolvable();
            const sendSecondChunkBarrier = resolvable();
            const app = await createApp({
              typeDefs,
              __testing_incrementalExecutionResults: {
                initialResult: {
                  hasNext: true,
                  data: { testString: 'it works' },
                },
                subsequentResults: (async function* () {
                  await sendSecondChunkBarrier;
                  yield {
                    hasNext: false,
                    incremental: [
                      { path: [], data: { barrierString: 'we waited' } },
                    ],
                  };
                })(),
              },
            });
            const resPromise = request(app)
              .post('/')
              .set(
                'accept',
                'multipart/mixed; deferSpec=20220824, application/json',
              )
              .parse((res, fn) => {
                res.text = '';
                res.setEncoding('utf8');
                res.on('data', (chunk) => {
                  res.text += chunk;
                  if (
                    res.text.includes('it works') &&
                    res.text.endsWith('---\r\n')
                  ) {
                    gotFirstChunkBarrier.resolve();
                  }
                });
                res.on('end', fn);
              })
              .send({ query: '{ testString ... @defer { barrierString } }' })
              // believe it or not, superagent uses `.then` to decide to actually send the request
              .then((r) => r);

            // We ensure that the second chunk can't be sent until after we've
            // gotten back a chunk containing the value of testString.
            await gotFirstChunkBarrier;
            sendSecondChunkBarrier.resolve();

            const res = await resPromise;
            expect(res.status).toEqual(200);
            expect(res.header['content-type']).toMatchInlineSnapshot(
              `"multipart/mixed; boundary="-"; deferSpec=20220824"`,
            );
            expect(res.text).toMatchInlineSnapshot(`
              "
              ---
              content-type: application/json; charset=utf-8

              {"hasNext":true,"data":{"testString":"it works"}}
              ---
              content-type: application/json; charset=utf-8

              {"hasNext":false,"incremental":[{"path":[],"data":{"barrierString":"we waited"}}]}
              -----
              "
            `);
          });
        });

        // These tests actually execute incremental delivery operations with
        // graphql-js, so we only run them from the CI job that installs a
        // prerelease of graphql@17. Once graphql@17 is released we can switch
        // to running them by default (and run tests against graphql@16 for
        // back-compat).
        (process.env.INCREMENTAL_DELIVERY_TESTS_ENABLED
          ? describe
          : describe.skip)('tests that require graphql@17', () => {
          let barrierStringBarrier: Resolvable<void>;
          beforeEach(() => {
            barrierStringBarrier = resolvable();
          });
          const resolvers = {
            Query: {
              testString() {
                return 'it works';
              },
              async barrierString() {
                await barrierStringBarrier;
                return 'we waited';
              },
            },
          };

          it.each([
            [undefined],
            ['application/json'],
            ['multipart/mixed'],
            ['multipart/mixed; deferSpec=12345'],
          ])('errors when @defer is used with accept: %s', async (accept) => {
            const app = await createApp({ typeDefs, resolvers });
            const req = request(app).post('/');
            if (accept) {
              req.set('accept', accept);
            }
            const res = await req.send({
              query: '{ ... @defer { testString } }',
            });
            expect(res.status).toEqual(406);
            expect(res.body).toMatchInlineSnapshot(`
                      {
                        "errors": [
                          {
                            "extensions": {
                              "code": "BAD_REQUEST",
                            },
                            "message": "Apollo server received an operation that uses incremental delivery (@defer or @stream), but the client does not accept multipart/mixed HTTP responses. To enable incremental delivery support, add the HTTP header 'Accept: multipart/mixed; deferSpec=20220824'.",
                          },
                        ],
                      }
                  `);
          });

          it.each([
            ['multipart/mixed; deferSpec=20220824'],
            ['multipart/mixed; deferSpec=20220824, application/json'],
            ['application/json, multipart/mixed; deferSpec=20220824'],
          ])('basic @defer working with accept: %s', async (accept) => {
            const app = await createApp({ typeDefs, resolvers });
            const res = await request(app)
              .post('/')
              .set('accept', accept)
              // disables supertest's use of formidable for multipart
              .parse(superagent.parse.text)
              .send({
                query: '{ first: testString ... @defer { testString } }',
              });
            expect(res.status).toEqual(200);
            expect(res.header['content-type']).toMatchInlineSnapshot(
              `"multipart/mixed; boundary="-"; deferSpec=20220824"`,
            );
            expect(res.text).toEqual(`\r
---\r
content-type: application/json; charset=utf-8\r
\r
{"hasNext":true,"data":{"first":"it works"}}\r
---\r
content-type: application/json; charset=utf-8\r
\r
{"hasNext":false,"incremental":[{"path":[],"data":{"testString":"it works"}}]}\r
-----\r
`);
          });

          it('first payload sent while deferred field is blocking', async () => {
            const app = await createApp({ typeDefs, resolvers });
            const gotFirstChunkBarrier = resolvable();
            const resPromise = request(app)
              .post('/')
              .set(
                'accept',
                'multipart/mixed; deferSpec=20220824, application/json',
              )
              .parse((res, fn) => {
                res.text = '';
                res.setEncoding('utf8');
                res.on('data', (chunk) => {
                  res.text += chunk;
                  if (
                    res.text.includes('it works') &&
                    res.text.endsWith('---\r\n')
                  ) {
                    gotFirstChunkBarrier.resolve();
                  }
                });
                res.on('end', fn);
              })
              .send({ query: '{ testString ... @defer { barrierString } }' })
              // believe it or not, superagent uses `.then` to decide to actually send the request
              .then((r) => r);

            // We ensure that the `barrierString` resolver isn't allowed to resolve
            // until after we've gotten back a chunk containing the value of testString.
            await gotFirstChunkBarrier;
            barrierStringBarrier.resolve();

            const res = await resPromise;
            expect(res.status).toEqual(200);
            expect(res.header['content-type']).toMatchInlineSnapshot(
              `"multipart/mixed; boundary="-"; deferSpec=20220824"`,
            );
            expect(res.text).toMatchInlineSnapshot(`
              "
              ---
              content-type: application/json; charset=utf-8

              {"hasNext":true,"data":{"testString":"it works"}}
              ---
              content-type: application/json; charset=utf-8

              {"hasNext":false,"incremental":[{"path":[],"data":{"barrierString":"we waited"}}]}
              -----
              "
            `);
          });
        });
      },
    );

    describe('Persisted Queries', () => {
      const query = '{testString}';
      const query2 = '{ testString }';

      const hash = createHash('sha256').update(query).digest('hex');
      const extensions = {
        persistedQuery: {
          version: 1,
          sha256Hash: hash,
        },
      };

      const extensions2 = {
        persistedQuery: {
          version: 1,
          sha256Hash: createHash('sha256').update(query2).digest('hex'),
        },
      };

      let didEncounterErrors: Mock<
        NonNullable<GraphQLRequestListener<BaseContext>['didEncounterErrors']>
      >;

      let didResolveSource: Mock<
        NonNullable<GraphQLRequestListener<BaseContext>['didResolveSource']>
      >;

      function createApqApp(
        apqOptions: PersistedQueryOptions = {},
        allowBatchedHttpRequests = false,
      ) {
        return createApp({
          schema,
          plugins: [
            {
              async requestDidStart() {
                return {
                  didResolveSource,
                  didEncounterErrors,
                };
              },
            },
          ],
          persistedQueries: {
            cache,
            ...apqOptions,
          },
          allowBatchedHttpRequests,
        });
      }

      let cache: KeyValueCache<string>;
      let setSpy: SpyInstance<typeof cache.set>;
      beforeEach(async () => {
        cache = new InMemoryLRUCache();
        setSpy = jest.spyOn(cache, 'set');
        didResolveSource = jest.fn();
        didEncounterErrors = jest.fn();
      });

      it('when ttlSeconds is set, passes ttl to the apq cache set call', async () => {
        const app = await createApqApp({ ttl: 900 });

        await request(app).post('/').send({
          extensions,
          query,
        });

        expect(setSpy).toHaveBeenCalledWith(`apq:${hash}`, query, { ttl: 900 });
        expect(didResolveSource.mock.calls[0][0]).toHaveProperty(
          'source',
          query,
        );
      });

      it('when ttlSeconds is unset, ttl is not passed to apq cache', async () => {
        const app = await createApqApp();

        await request(app).post('/').send({
          extensions,
          query,
        });

        expect(setSpy).toHaveBeenCalledWith(
          `apq:${hash}`,
          '{testString}',
          undefined,
        );
        expect(didResolveSource.mock.calls[0][0]).toHaveProperty(
          'source',
          query,
        );
      });

      it('errors when version is not specified', async () => {
        const app = await createApqApp();

        const result = await request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query({
            query,
            extensions: JSON.stringify({
              persistedQuery: {
                // Version intentionally omitted.
                sha256Hash: extensions.persistedQuery.sha256Hash,
              },
            }),
          });

        expect(result).toMatchObject({
          status: 400,
          // Different integrations' response text varies in format.
          text: expect.stringContaining('Unsupported persisted query version'),
          req: expect.objectContaining({
            method: 'GET',
          }),
        });

        expect(didEncounterErrors).toBeCalledWith(
          expect.objectContaining({
            errors: expect.arrayContaining([
              expect.objectContaining({
                message: 'Unsupported persisted query version',
              }),
            ]),
          }),
        );
      });

      it('errors when version is unsupported', async () => {
        const app = await createApqApp();

        const result = await request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query({
            query,
            extensions: JSON.stringify({
              persistedQuery: {
                // Version intentionally wrong.
                version: 2,
                sha256Hash: extensions.persistedQuery.sha256Hash,
              },
            }),
          });

        expect(result).toMatchObject({
          status: 400,
          // Different integrations' response text varies in format.
          text: expect.stringContaining('Unsupported persisted query version'),
          req: expect.objectContaining({
            method: 'GET',
          }),
        });

        expect(didEncounterErrors).toBeCalledWith(
          expect.objectContaining({
            errors: expect.arrayContaining([
              expect.objectContaining({
                message: 'Unsupported persisted query version',
              }),
            ]),
          }),
        );
      });

      it('errors when hash is mismatched', async () => {
        const app = await createApqApp();

        const result = await request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query({
            query,
            extensions: JSON.stringify({
              persistedQuery: {
                version: 1,
                // Sha intentionally wrong.
                sha256Hash: extensions.persistedQuery.sha256Hash.substr(0, 5),
              },
            }),
          });

        expect(result).toMatchObject({
          status: 400,
          // Different integrations' response text varies in format.
          text: expect.stringContaining('provided sha does not match query'),
          req: expect.objectContaining({
            method: 'GET',
          }),
        });

        expect(didEncounterErrors).toBeCalledWith(
          expect.objectContaining({
            errors: expect.arrayContaining([
              expect.objectContaining({
                message: 'provided sha does not match query',
              }),
            ]),
          }),
        );

        expect(didResolveSource).not.toHaveBeenCalled();
      });

      it('returns PersistedQueryNotFound on the first try', async () => {
        const app = await createApqApp();

        const result = await request(app).post('/').send({
          extensions,
        });

        expect(result.body.data).toBeUndefined();
        expect(result.body.errors.length).toEqual(1);
        expect(result.body.errors[0].message).toEqual('PersistedQueryNotFound');
        expect(result.body.errors[0].extensions.code).toEqual(
          'PERSISTED_QUERY_NOT_FOUND',
        );

        expect(didEncounterErrors).toBeCalledWith(
          expect.objectContaining({
            errors: expect.arrayContaining([
              expect.objectContaining({
                name: 'PersistedQueryNotFoundError',
                message: 'PersistedQueryNotFound',
              }),
            ]),
          }),
        );

        expect(didResolveSource).not.toHaveBeenCalled();
      });
      it('returns result on the second try', async () => {
        const app = await createApqApp();

        await request(app).post('/').send({
          extensions,
        });

        // Only the first request should result in an error.
        expect(didEncounterErrors).toHaveBeenCalledTimes(1);
        expect(didEncounterErrors).toBeCalledWith(
          expect.objectContaining({
            errors: expect.arrayContaining([
              expect.objectContaining({
                name: 'PersistedQueryNotFoundError',
                message: 'PersistedQueryNotFound',
              }),
            ]),
          }),
        );

        expect(didResolveSource).not.toHaveBeenCalled();

        const result = await request(app).post('/').send({
          extensions,
          query,
        });

        // There should be no additional errors now.  In other words, we'll
        // re-assert that we've been called the same single time that we
        // asserted above.
        expect(didEncounterErrors).toHaveBeenCalledTimes(1);

        expect(didResolveSource.mock.calls[0][0]).toHaveProperty(
          'source',
          query,
        );

        expect(result.body.data).toEqual({ testString: 'it works' });
        expect(result.body.errors).toBeUndefined();
      });

      it('returns with batched persisted queries', async () => {
        const app = await createApqApp({}, true); // allow batching

        const errors = await request(app)
          .post('/')
          .send([
            {
              extensions,
            },
            {
              extensions: extensions2,
            },
          ]);

        expect(errors.body[0].data).toBeUndefined();
        expect(errors.body[1].data).toBeUndefined();
        expect(errors.body[0].errors[0].message).toEqual(
          'PersistedQueryNotFound',
        );
        expect(errors.body[0].errors[0].extensions.code).toEqual(
          'PERSISTED_QUERY_NOT_FOUND',
        );
        expect(errors.body[1].errors[0].message).toEqual(
          'PersistedQueryNotFound',
        );
        expect(errors.body[1].errors[0].extensions.code).toEqual(
          'PERSISTED_QUERY_NOT_FOUND',
        );

        const result = await request(app)
          .post('/')
          .send([
            {
              extensions,
              query,
            },
            {
              extensions: extensions2,
              query: query2,
            },
          ]);

        expect(result.body[0].data).toEqual({ testString: 'it works' });
        expect(result.body[0].data).toEqual({ testString: 'it works' });
        expect(result.body.errors).toBeUndefined();
      });

      it('returns result on the persisted query', async () => {
        const app = await createApqApp();

        await request(app).post('/').send({
          extensions,
        });

        expect(didResolveSource).not.toHaveBeenCalled();

        await request(app).post('/').send({
          extensions,
          query,
        });
        const result = await request(app).post('/').send({
          extensions,
        });

        expect(didResolveSource.mock.calls[0][0]).toHaveProperty(
          'source',
          query,
        );

        expect(result.body.data).toEqual({ testString: 'it works' });
        expect(result.body.errors).toBeUndefined();
      });

      it('returns error when hash does not match', async () => {
        const app = await createApqApp();

        const response = await request(app)
          .post('/')
          .send({
            extensions: {
              persistedQuery: {
                version: 1,
                sha: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
              },
            },
            query,
          });
        expect(response.status).toEqual(400);
        expect((response.error as HTTPError).text).toMatch(
          /does not match query/,
        );
        expect(didResolveSource).not.toHaveBeenCalled();
      });

      it('returns correct result using get request', async () => {
        const app = await createApqApp();

        await request(app).post('/').send({
          extensions,
          query,
        });
        const result = await request(app)
          .get('/')
          .set('apollo-require-preflight', 't')
          .query({
            extensions: JSON.stringify(extensions),
          });
        expect(result.body.data).toEqual({ testString: 'it works' });
        expect(didResolveSource.mock.calls[0][0]).toHaveProperty(
          'source',
          query,
        );
      });
    });

    describe('gateway execution', () => {
      it('executor can read and write response HTTP headers and status', async () => {
        const app = await createApp({
          plugins: [
            {
              async requestDidStart({ response }) {
                response.http.headers.set('header-in', 'send this in');
                return {
                  async willSendResponse({ response }) {
                    response.http.headers.set(
                      'got-status-from-plugin',
                      `${response.http.status}`,
                    );
                  },
                };
              },
            },
          ],
          gateway: {
            async load() {
              return {
                schema,
                async executor(requestContext) {
                  const http = requestContext.response?.http!;
                  http.headers.set(
                    'header-out',
                    http.headers.get('header-in') === 'send this in'
                      ? 'got it'
                      : 'did not',
                  );
                  http.status = 202;
                  return { data: { testString: 'hi' } };
                },
              };
            },
            async stop() {},
            onSchemaLoadOrUpdate(f) {
              f({ apiSchema: schema, coreSupergraphSdl: '' });
              return () => {};
            },
          },
        });

        const res = await request(app)
          .post('/')
          .send({ query: `{testString}` });

        expect(res.status).toEqual(202);
        expect(res.headers['header-in']).toEqual('send this in');
        expect(res.headers['header-out']).toEqual('got it');
        expect(res.headers['got-status-from-plugin']).toEqual('202');
        expect(res.body).toMatchInlineSnapshot(`
          {
            "data": {
              "testString": "hi",
            },
          }
        `);
      });
    });
  });
}