blog/graphql-persisted-query

[giscus[bot]]

blog/graphql-persisted-query

Learn how to do reverse engineering on persistedQuery extension by GraphQL and reveal the query hash needed for scraping.

https://crawlee.dev/blog/graphql-persisted-query

[lbarbanotti]

Maybe I'm missing something but both Firefox and Chrome are prevented to access the desired webpage once that mitmproxy script is running...any idea? Thanks

[mvolfik]

@lbarbanotti ouch, thanks for pointing this out. I realized that's a setup step that I completely forgot about, because you only do it once after installing mitmproxy. So I had it setup from long time ago, and missed it when testing the approach.

Since mitmproxy needs to see and modify contents of HTTPS requests, it needs to locally decrypt all the traffic. To do this, it uses its own TLS certificate, which needs to be installed your browser. So after you start the proxy and connect your browser to it, go to http://mitm.it - the certificate that was generated by your local installation will be available there, along with setup instructions. (This procedure is mentioned in mitmproxy docs here)

I should probably add this missing step into the article...