December 2020 Summaries

In this article, we learn how to build GraphQL APIs with Laravel, PostgreSQL, and Hasura Remote Joins. The author guides us through setting up Laravel, creating a PostgreSQL database using ElephantSQL, and configuring Hasura for querying and remote joining multiple tables in the database. We also learn about Lighthouse PHP, GraphQL Playground, and how to create relationships between different data sources. Finally, we test our setup by performing remote joins on the Hasura console.

This tutorial demonstrates how to implement infinite scroll in a Vue.js app using Apollo and Hasura GraphQL. The steps covered include setting up a Vue/Apollo app, configuring local Hasura with Docker, seeding the database with mock data, making paginated database calls with Apollo's fetchMore feature, and implementing scroll loading in the frontend. By following this tutorial, developers can gain a better understanding of using Hasura's GraphQL server effectively in their web app stack and learn how to implement infinite scroll in their own JavaScript apps.

Hasura is preparing for "GraphQL January" in 2021, a series of content, tutorials, and streams to help developers learn and explore GraphQL. The event will feature daily blogs on various aspects of learning GraphQL, weekly language-specific livestreams on Twitch, tutorial videos hosted on their learning portal and YouTube, live Q&A sessions in the community Discord, and Hasura Office Hours for those interested in applying Hasura to their company's GraphQL journey. Interested participants can register to stay updated on the event schedule and content.

This tutorial demonstrates how to use GraphQL Mesh and Hasura Remote Joins to create a data graph. The process involves setting up a new project with GraphQL Mesh, creating a config file for the data source, running GraphQL Mesh, adding the API endpoint as a remote schema in Hasura Cloud, and establishing relationships between Hasura's GraphQL API and APIs sourced via GraphQL Mesh. By using GraphQL Mesh as a gateway to other services or as a local GraphQL schema that aggregates data from remote APIs, developers can create a single GraphQL endpoint for multiple different sources combined.

Hasura Cloud has achieved both SOC2 Type 1 and HIPAA compliance certifications. The platform offers managed services with high availability and auto-scaling capabilities, as well as additional features like caching, analytics, and APM integration. It is now compliant with stringent security controls and can be considered for healthcare initiatives that involve processing electronic health records and medical billing. Hasura Cloud will also undergo a SOC2 Type 2 audit in Q2 2021.

GraphQL data fetching with SWR React Hooks and Hasura involves utilizing SWR, a stale-while-revalidate caching strategy, to efficiently manage data fetching and revalidation. By using SWR, developers can first return cached data and then fetch updated data, ensuring efficient data handling. The SWR API allows for simple integration with GraphQL, using a key to identify requests and an async fetcher function to retrieve data, with a focus on preventing duplicate requests across components. The integration with Hasura Cloud facilitates the creation of a GraphQL API, enabling developers to easily deploy and manage a database, and demonstrates the use of SWR hooks, such as useSWR and mutate, for handling queries and mutations. Developers can perform GraphQL queries, mutations, and subscriptions, utilizing native HTTP and WebSocket connections, while also accommodating server-side pre-rendering for SEO benefits using initialData and getStaticProps. The process includes setting up a Hasura deployment, creating database tables, and implementing frontend data fetching, with the source code available for further exploration and experimentation.

Hasura has made changes to its community tooling and shared the thought process behind these updates. The company now uses GitHub Discussions for technical discussions, troubleshooting, and showcasing work. Other platforms include Discord for real-time chat, a newsletter for monthly highlights, community calls for product updates, and office hours for live Q&A sessions. Hasura chose GitHub Discussions over other options like Discourse and Stack Overflow due to its integration with the development tool, searchability of discussion topics, and ease of access. The company will continue using Discord for community engagement but will streamline channels to focus on collaboration and local communities.

This article provides a walkthrough of implementing a JSON parser using parser combinators. It begins by defining the type representation for parsers and writing elementary parsers. The sequencing of parsers is then covered, followed by introducing monads to simplify the code. Combinators such as choice, errors, backtracking, and repetition are also discussed. Finally, a JSON parser is built using these concepts, demonstrating how they can be combined to create more complex parsers. The article emphasizes the beauty of parser combinators and their practical applications in various scenarios.

Hasura Cloud has expanded its deployment regions to include Sydney, Montreal, and London, bringing the total number of supported regions to eight. These new locations can improve application performance by reducing data latency and enhancing user experience. Users can easily select a region during project creation or migration in the cloud.hasura.io platform. Hasura Cloud offers a GraphQL API for existing databases and supports various commercial plans, including free projects deployable to US-East only.

This article discusses how to secure GraphQL APIs with Hasura Cloud. It highlights the differences between REST APIs and GraphQL APIs in terms of security, explaining that URL-based filtering cannot be applied to GraphQL APIs due to their single endpoint nature. The article then delves into various attack vectors such as introspection, authentication, authorization, admin secret, API limits, external APIs, restrictive CORS, and timeouts. It provides solutions for each of these attack vectors using Hasura Cloud's features like Allow List, role-based access control, and configuration settings. The article concludes by recommending Hasura's production checklist to address top-level security concerns before going live with an application.