docs(implementations): audit report [skip ci]

Author: github-actions[bot]

implementations/apollo-server/README.md

@@ -2,54 +2,55 @@ _* This report was auto-generated by graphql-http_
 
 # GraphQL over HTTP audit report
 
-- **72** audits in total
-- ✅ **42** pass
+- **73** audits in total
+- ✅ **44** pass
 - ⚠️ **29** warnings (optional)
-- ❌ **1** errors (required)
 
 ## Passing
 1. MUST accept application/json and match the content-type
 2. MUST use utf-8 encoding when responding
-3. MUST accept POST requests
-4. MAY accept application/x-www-form-urlencoded formatted GET requests
-5. MUST NOT allow executing mutations on GET requests
-6. SHOULD respond with 4xx status code if content-type is not supplied on POST requests
-7. MUST accept application/json POST requests
-8. MUST require a request body on POST
-9. SHOULD use 400 status code on missing {query} parameter when accepting application/graphql-response+json
-10. SHOULD use 400 status code on object {query} parameter when accepting application/graphql-response+json
-11. SHOULD use 400 status code on number {query} parameter when accepting application/graphql-response+json
-12. SHOULD use 400 status code on boolean {query} parameter when accepting application/graphql-response+json
-13. SHOULD use 400 status code on array {query} parameter when accepting application/graphql-response+json
-14. SHOULD allow string {query} parameter when accepting application/graphql-response+json
-15. MUST allow string {query} parameter when accepting application/json
-16. SHOULD use 400 status code on object {operationName} parameter when accepting application/graphql-response+json
-17. SHOULD use 400 status code on number {operationName} parameter when accepting application/graphql-response+json
-18. SHOULD use 400 status code on boolean {operationName} parameter when accepting application/graphql-response+json
-19. SHOULD use 400 status code on array {operationName} parameter when accepting application/graphql-response+json
-20. SHOULD allow string {operationName} parameter when accepting application/graphql-response+json
-21. MUST allow string {operationName} parameter when accepting application/json
-22. SHOULD use 400 status code on string {variables} parameter when accepting application/graphql-response+json
-23. SHOULD use 400 status code on number {variables} parameter when accepting application/graphql-response+json
-24. SHOULD use 400 status code on boolean {variables} parameter when accepting application/graphql-response+json
-25. SHOULD allow map {variables} parameter when accepting application/graphql-response+json
-26. MUST allow map {variables} parameter when accepting application/json
-27. SHOULD allow URL-encoded JSON string {variables} parameter in GETs when accepting application/graphql-response+json
-28. MUST allow URL-encoded JSON string {variables} parameter in GETs when accepting application/json
-29. SHOULD use 400 status code on string {extensions} parameter when accepting application/graphql-response+json
-30. SHOULD allow map {extensions} parameter when accepting application/graphql-response+json
-31. MUST allow map {extensions} parameter when accepting application/json
-32. SHOULD use 4xx or 5xx status codes on JSON parsing failure when accepting application/graphql-response+json
-33. SHOULD use 400 status code on JSON parsing failure when accepting application/graphql-response+json
-34. SHOULD use 4xx or 5xx status codes if parameters are invalid when accepting application/graphql-response+json
-35. SHOULD use 400 status code if parameters are invalid when accepting application/graphql-response+json
-36. SHOULD not contain the data entry if parameters are invalid when accepting application/graphql-response+json
-37. SHOULD use 4xx or 5xx status codes on document parsing failure when accepting application/graphql-response+json
-38. SHOULD use 400 status code on document parsing failure when accepting application/graphql-response+json
-39. SHOULD not contain the data entry on document parsing failure when accepting application/graphql-response+json
-40. SHOULD use 4xx or 5xx status codes on document validation failure when accepting application/graphql-response+json
-41. SHOULD use 400 status code on document validation failure when accepting application/graphql-response+json
-42. SHOULD not contain the data entry on document validation failure when accepting application/graphql-response+json
+3. MUST accept utf-8 encoding
+4. MUST assume utf-8 if encoding is unspecified
+5. MUST accept POST requests
+6. MAY accept application/x-www-form-urlencoded formatted GET requests
+7. MUST NOT allow executing mutations on GET requests
+8. SHOULD respond with 4xx status code if content-type is not supplied on POST requests
+9. MUST accept application/json POST requests
+10. MUST require a request body on POST
+11. SHOULD use 400 status code on missing {query} parameter when accepting application/graphql-response+json
+12. SHOULD use 400 status code on object {query} parameter when accepting application/graphql-response+json
+13. SHOULD use 400 status code on number {query} parameter when accepting application/graphql-response+json
+14. SHOULD use 400 status code on boolean {query} parameter when accepting application/graphql-response+json
+15. SHOULD use 400 status code on array {query} parameter when accepting application/graphql-response+json
+16. SHOULD allow string {query} parameter when accepting application/graphql-response+json
+17. MUST allow string {query} parameter when accepting application/json
+18. SHOULD use 400 status code on object {operationName} parameter when accepting application/graphql-response+json
+19. SHOULD use 400 status code on number {operationName} parameter when accepting application/graphql-response+json
+20. SHOULD use 400 status code on boolean {operationName} parameter when accepting application/graphql-response+json
+21. SHOULD use 400 status code on array {operationName} parameter when accepting application/graphql-response+json
+22. SHOULD allow string {operationName} parameter when accepting application/graphql-response+json
+23. MUST allow string {operationName} parameter when accepting application/json
+24. SHOULD use 400 status code on string {variables} parameter when accepting application/graphql-response+json
+25. SHOULD use 400 status code on number {variables} parameter when accepting application/graphql-response+json
+26. SHOULD use 400 status code on boolean {variables} parameter when accepting application/graphql-response+json
+27. SHOULD allow map {variables} parameter when accepting application/graphql-response+json
+28. MUST allow map {variables} parameter when accepting application/json
+29. SHOULD allow URL-encoded JSON string {variables} parameter in GETs when accepting application/graphql-response+json
+30. MUST allow URL-encoded JSON string {variables} parameter in GETs when accepting application/json
+31. SHOULD use 400 status code on string {extensions} parameter when accepting application/graphql-response+json
+32. SHOULD allow map {extensions} parameter when accepting application/graphql-response+json
+33. MUST allow map {extensions} parameter when accepting application/json
+34. SHOULD use 4xx or 5xx status codes on JSON parsing failure when accepting application/graphql-response+json
+35. SHOULD use 400 status code on JSON parsing failure when accepting application/graphql-response+json
+36. SHOULD use 4xx or 5xx status codes if parameters are invalid when accepting application/graphql-response+json
+37. SHOULD use 400 status code if parameters are invalid when accepting application/graphql-response+json
+38. SHOULD not contain the data entry if parameters are invalid when accepting application/graphql-response+json
+39. SHOULD use 4xx or 5xx status codes on document parsing failure when accepting application/graphql-response+json
+40. SHOULD use 400 status code on document parsing failure when accepting application/graphql-response+json
+41. SHOULD not contain the data entry on document parsing failure when accepting application/graphql-response+json
+42. SHOULD use 4xx or 5xx status codes on document validation failure when accepting application/graphql-response+json
+43. SHOULD use 400 status code on document validation failure when accepting application/graphql-response+json
+44. SHOULD not contain the data entry on document validation failure when accepting application/graphql-response+json
 
 ## Warnings
 The server _SHOULD_ support these, but is not required.
@@ -170,9 +171,3 @@ Status code 400 is not 200
 Response body is not valid JSON. Got "<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<title>Error</title>\n</head>\n<body>\n<pre>SyntaxError: Unexpected end of JSON input<br> &nbsp; &nbsp;at JSON.parse (&lt;anonymous&gt;)<br> &nbsp; &nbsp;at parse (/home/runner/work/graphql-http/graphql-http/node_modules/body-parser/lib/types/json.js:89:19)<br> &nbsp; &nbsp;at /home/runner/work/graphql-http/graphql-http/node_modules/body-parser/lib/read.js:128:18<br> &nbsp; &nbsp;at AsyncResource.runInAsyncScope (node:async_hooks:203:9)<br> &nbsp; &nbsp;at invokeCallback (/home/runner/work/graphql-http/graphql-http/node_modules/raw-body/index.js:231:16)<br> &nbsp; &nbsp;at done (/home/runner/work/graphql-http/graphql-http/node_modules/raw-body/index.js:220:7)<br> &nbsp; &nbsp;at IncomingMessage.onEnd (/home/runner/work/graphql-http/graphql-http/node_modules/raw-body/index.js:280:7)<br> &nbsp; &nbsp;at IncomingMessage.emit (node:events:513:28)<br> &nbsp; &nbsp;at endReadableNT (node:internal/streams/rea...
 ```
 
-## Errors
-The server _MUST_ support these.
-1. MUST accept only utf-8 charset<br />
-```
-Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
-```

implementations/express-graphql/README.md

@@ -2,10 +2,10 @@ _* This report was auto-generated by graphql-http_
 
 # GraphQL over HTTP audit report
 
-- **72** audits in total
+- **73** audits in total
 - ✅ **36** pass
 - ⚠️ **35** warnings (optional)
-- ❌ **1** errors (required)
+- ❌ **2** errors (required)
 
 ## Passing
 1. MUST accept application/json and match the content-type
@@ -190,7 +190,11 @@ Status code 400 is not 200
 
 ## Errors
 The server _MUST_ support these.
-1. MUST accept only utf-8 charset<br />
+1. MUST accept utf-8 encoding<br />
 ```
-Execution result {"data":{"__typename":"Query"}} does not have a property 'errors'
+Status code 400 is not 200
+```
+2. MUST assume utf-8 if encoding is unspecified<br />
+```
+Status code 400 is not 200
 ```