From 72d8f54913155875acae339e3c550ed4293ca7ff Mon Sep 17 00:00:00 2001
From: blam <ben@blam.sh>
Date: Fri, 14 Aug 2020 14:37:17 +0200
Subject: [PATCH] chore(gql/catalog): fixing some code review comments

---
 plugins/catalog-graphql/package.json  |  3 +--
 plugins/graphql/package.json          |  4 ++--
 plugins/graphql/src/service/router.ts | 17 ++++++++++-------
 3 files changed, 13 insertions(+), 11 deletions(-)

diff --git a/plugins/catalog-graphql/package.json b/plugins/catalog-graphql/package.json
index 79277bdc2b..5531c23ade 100644
--- a/plugins/catalog-graphql/package.json
+++ b/plugins/catalog-graphql/package.json
@@ -44,7 +44,6 @@
     "supertest": "^4.0.2"
   },
   "files": [
-    "dist",
-    "schema.gql"
+    "dist"
   ]
 }
diff --git a/plugins/graphql/package.json b/plugins/graphql/package.json
index d50043d50f..e8b179288c 100644
--- a/plugins/graphql/package.json
+++ b/plugins/graphql/package.json
@@ -24,8 +24,8 @@
     "@backstage/plugin-catalog-graphql": "^0.1.1-alpha.18",
     "@graphql-modules/core": "^0.7.17",
     "@types/express": "^4.17.6",
-    "apollo-server": "^2.16.0",
-    "apollo-server-express": "^2.16.0",
+    "apollo-server": "^2.16.1",
+    "apollo-server-express": "^2.16.1",
     "express": "^4.17.1",
     "express-promise-router": "^3.0.3",
     "graphql": "^15.3.0",
diff --git a/plugins/graphql/src/service/router.ts b/plugins/graphql/src/service/router.ts
index cd926da3a2..a06f696533 100644
--- a/plugins/graphql/src/service/router.ts
+++ b/plugins/graphql/src/service/router.ts
@@ -51,19 +51,22 @@ export async function createRouter(
   const server = new ApolloServer({
     schema,
     logger: options.logger,
+    introspection: true,
+    playground: process.env.NODE_ENV === 'development',
   });
 
   const router = Router();
 
   const apolloMiddlware = server.getMiddleware({ path: '/' });
 
-  router.use(
-    helmet.contentSecurityPolicy({
-      directives: {
-        defaultSrc: ["'self'", "'unsafe-inline'", 'http://*'],
-      },
-    }),
-  );
+  if (process.env.NODE_ENV === 'development')
+    router.use(
+      helmet.contentSecurityPolicy({
+        directives: {
+          defaultSrc: ["'self'", "'unsafe-inline'", 'http://*'],
+        },
+      }),
+    );
 
   router.use(apolloMiddlware);