POC: Hasura allow list manager

[reinoldus]

I've been struggling for quite a while to get the allow list managing right, adding the queries manually is a pain and "auto-parsing" from the frontend is also not crazy reliable if you have queries in code.

So I wrote this little tool it's based on nuxt + tiny python backend:

https://github.com/reinoldus/hasura-allow-list-manager

It's very early stages but it works already. If some people would like to chip in to make it better would be great

The way it works (from the readme):

We are listening to the hasura docker container logs where all the queries that are requested are logged. (Your hasura instance has to enable "query-log".)

Every time you reload the frontend we'll fetch the most recent metadata from hasura and take out the queries from there which are already in the allow-list.

The queries from both sources are hashed in the same way to make it easier to compare them, this should be fine because hasura is pretty strict with it's allow list, if you change the order of the attributes in your query, it's considered a different query.

And that is pretty much it nothing more to it.

How it looks: