undefined | Better HN

0 pointscatlover7610mo ago0 comments

What would you say the good and bad of GraphQL are? Like, when it is a value-add, and when should it be avoided?

0 comments

The good news is GraphQL is very quick and easy to pick up and it gives that inbuilt functionality to fetch exactly the amount of data that we need. On top of it, it also has enough flexibility to integrate with your business logic. So it can be a straightforward replacement for a traditional REST API that you would have to manually build.

For the disadvantages, I cannot think of any. It is a bit slower than hand rolling your own REST API, but the difference is not severe enough to make you give up on it.

Aeolos10mo ago

GraphQL APIs can easily DOS your backend if you don't configure extra protections (which are neither bulletproof nor enabled by default), they suffer from N+1 inefficiencies by default unless you write a ton of extra code, and they require extra careful programming to apply security rules on every field which can get very complex very fast.

On the plus side, it does have offer communication advantages if you have entirely independent BE and FE teams, and it can help minimize network traffic for network-constrained scenarios such as mobile apps.

Personally, I have regretted using GraphQL every time.

demilicious10mo ago

My biggest gripe is losing the entire layer of semantics that HTTP gives you. POST is the only verb and different error states are conveyed via error objects in the returned JSON.

Bombthecat10mo ago

The biggest issue is security. More often then not, the API allows you to see more than you should.

princevegeta8910mo ago

This is probably true, and it can only be uncovered by rigorous testing. There is a bunch of layers of abstraction that won't be very obvious if you are using GraphQL as opposed to rolling your own REST API.

j / k navigate · click thread line to collapse

0 comments

princevegeta8910mo ago

For the disadvantages, I cannot think of any. It is a bit slower than hand rolling your own REST API, but the difference is not severe enough to make you give up on it.

Aeolos10mo ago

Personally, I have regretted using GraphQL every time.

demilicious10mo ago

My biggest gripe is losing the entire layer of semantics that HTTP gives you. POST is the only verb and different error states are conveyed via error objects in the returned JSON.

Bombthecat10mo ago

The biggest issue is security. More often then not, the API allows you to see more than you should.

princevegeta8910mo ago

j / k navigate · click thread line to collapse