Hot Chocolate GraphQL - MaxExecutionDepth not working

Question

How do I get MaxExecutionDepth to work in Hot Chocolate GraphQL? Here is my code:

    // Add GraphQL Services
    services.AddGraphQL(
        SchemaBuilder.New()
            // enable for authorization support
            .AddAuthorizeDirectiveType()
            .ModifyOptions(o => o.RemoveUnreachableTypes = true)
            .Create()
            .MakeExecutable(
                builder =>
                    builder
                        .UseDefaultPipeline()
                        .AddErrorFilter<UseExceptionMessageErrorFilter>()
                        .AddOptions(
                            new QueryExecutionOptions()
                            {
                                MaxExecutionDepth = 15
                            }))
            .Schema);

I've tested with this, even changing MaxExecutionDepth to 1, but I can still execute 20+ deep queries.

Have you tried to move use setting in the [`Create` call](https://hotchocolate.io/docs/general-schema-options#__docusaurus) — Guru Stron, May 06 '20 at 14:26
@GuruStron not sure what you mean; `Create()` takes no params. — System.Cats.Lol, May 06 '20 at 14:28

score 2 · Accepted Answer · answered May 07 '20 at 15:49

Per the developer in the GitHub issue I created, was able to get it working like this:

            services.AddGraphQL(
                SchemaBuilder.New()
                    // enable for authorization support
                    .AddAuthorizeDirectiveType()
                    .ModifyOptions(o => o.RemoveUnreachableTypes = true)
                    .Create(),
                new QueryExecutionOptions()
                {
                    MaxExecutionDepth = ApiConfigurationConstants.MaxExecutionDepth
                });
            services.AddErrorFilter<UseExceptionMessageErrorFilter>();

Maximus2012 · Answer 2 · 2023-08-18T20:38:50.133

Since the original question and answer are more than 3 years old, so for anyone else like myself who ran into this issue now, this is another option (V13 of HotChocolate):

In your Program.cs modify the GraphQl server section like this and add AddMaxExecutionDepthRule:

builder.Services.AddGraphQLServer()
    .AddQueryType<GraphQlQuery>()
    .AddProjections()
    .AddFiltering()
    .AddSorting()
    .AddMaxExecutionDepthRule(5);

Here 5 (or any other number) is the depth that you want.

Reference: https://chillicream.com/docs/hotchocolate/v13/security#execution-depth

Hot Chocolate GraphQL - MaxExecutionDepth not working

2 Answers2