
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@hex-inc/apollo-upload-client
Advanced tools
A terminating Apollo Link for Apollo Client that allows FileList, File, Blob or ReactNativeFile instances within query or mutation variables and sends GraphQL multipart requests.
A terminating Apollo Link for Apollo Client that allows FileList
, File
, Blob
or ReactNativeFile
instances within query or mutation variables and sends GraphQL multipart requests.
Install with npm:
npm install apollo-upload-client
Apollo Boost doesn’t allow link customization; if you are using it migrate to a manual Apollo Client setup.
Apollo Client can only have 1 “terminating” Apollo Link that sends the GraphQL requests; if one such as apollo-link-http
is already setup, remove it.
Initialize the client with a terminating link using createUploadLink
.
Also ensure the GraphQL server implements the GraphQL multipart request spec and that uploads are handled correctly in resolvers.
Use FileList
, File
, Blob
or ReactNativeFile
instances anywhere within query or mutation variables to send a GraphQL multipart request.
See also the example API and client.
FileList
const { useMutation } = require("@apollo/react-hooks");
const gql = require("graphql-tag");
const MUTATION = gql`
mutation($files: [Upload!]!) {
uploadFiles(files: $files) {
success
}
}
`;
const UploadFile = () => {
const [mutate] = useMutation(MUTATION);
const onChange = ({ target: { validity, files } }) =>
validity.valid && mutate({ variables: { files } });
return <input type="file" multiple required onChange={onChange} />;
};
File
const { useMutation } = require("@apollo/react-hooks");
const gql = require("graphql-tag");
const MUTATION = gql`
mutation($file: Upload!) {
uploadFile(file: $file) {
success
}
}
`;
const UploadFile = () => {
const [mutate] = useMutation(MUTATION);
const onChange = ({
target: {
validity,
files: [file]
}
}) => validity.valid && mutate({ variables: { file } });
return <input type="file" required onChange={onChange} />;
};
Blob
const gql = require("graphql-tag");
// Apollo Client instance.
const client = require("./client");
const file = new Blob(["Foo."], { type: "text/plain" });
// Optional, defaults to `blob`.
file.name = "bar.txt";
client.mutate({
mutation: gql`
mutation($file: Upload!) {
uploadFile(file: $file) {
success
}
}
`,
variables: { file }
});
> 0.5%, not OperaMini all, not dead
Consider polyfilling:
FAQs
A terminating Apollo Link for Apollo Client that allows FileList, File, Blob or ReactNativeFile instances within query or mutation variables and sends GraphQL multipart requests.
We found that @hex-inc/apollo-upload-client demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.