SITES-5185 - Ensure all GraphQL Queries to publisher are using Persis…

…tent Queries and not POST requests (adobe#922)
sandru85 · May 11, 2022 · d83901e · d83901e
1 parent 26a046c
commit d83901e
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/src/main/archetype/dispatcher.cloud/src/conf.d/dispatcher_vhost.conf b/src/main/archetype/dispatcher.cloud/src/conf.d/dispatcher_vhost.conf
@@ -72,6 +72,16 @@ Alias "/system/probes/start" /etc/httpd/probes/startup-status.json
     </LocationMatch>
 </IfDefine>
 
+# SITES-5185 - Ensure all GraphQL Queries to production publisher are using Persistent Queries and not direct query requests
+<IfDefine ENVIRONMENT_PROD>
+    SSLProxyEngine on
+    <LocationMatch "^/content/_cq_graphql/.*/endpoint.json$">
+        RewriteCond %{ENV:ENABLE_GRAPHQL_ENDPOINT} ^$ [OR]
+        RewriteCond %{ENV:ENABLE_GRAPHQL_ENDPOINT} ^false$
+        RewriteRule ^/(.*)$ - [R=404,L]
+    </LocationMatch>
+</IfDefine>
+
 # If the module loads correctly then apply base settings for the module
 <IfModule disp_apache2.c>
 	# location of the configuration file. eg: 'conf/dispatcher.any'