Altair GraphQL Client 的评价
Altair GraphQL Client 作者: Samuel
Firefox 用户 15626011 的评价
评分 4 / 5
来自 Firefox 用户 15626011,5 年前BEWARE!
New versions of this extension requires access to "all data for all sites". I am unable to find an explanation for why this is required in the release notes or on their github page. This seems extremely fishy, and I am therefor uninstalling the extension out of caution.
New versions of this extension requires access to "all data for all sites". I am unable to find an explanation for why this is required in the release notes or on their github page. This seems extremely fishy, and I am therefor uninstalling the extension out of caution.
开发者回应
发布于 5 年前Fear not! Altair has always requested permissions for all sites but they were removed, and then re-added at v2.4.3. This is required to allow Altair send requests to your domain without getting CORS errors which is the default behavior. After the permissions were removed, there were several reported issues of Altair not working (e.g. https://github.com/imolorhe/altair/issues/1136). Of course these issues were resolved after re-adding the permissions in v2.4.3.
You can see the relevant commit trails:
Removed permission (v2.4.0): https://github.com/imolorhe/altair/commit/a0cd9fad9bdaba65966c12c8aa5fad409efdfd3c
Re-added permission (v2.4.3): https://github.com/imolorhe/altair/commit/2802c9429ebcd571ca046820dd74f2f893670fb2
You can read more on why these permissions are required here: https://developer.chrome.com/extensions/xhr
Of course if you still feel that the permissions are extremely fishy, you're welcome to use the desktop apps instead, or perhaps host Altair on your domain using one of the available integrations: https://altair.sirmuel.design/docs/integrations
Sorry for the confusion!
You can see the relevant commit trails:
Removed permission (v2.4.0): https://github.com/imolorhe/altair/commit/a0cd9fad9bdaba65966c12c8aa5fad409efdfd3c
Re-added permission (v2.4.3): https://github.com/imolorhe/altair/commit/2802c9429ebcd571ca046820dd74f2f893670fb2
You can read more on why these permissions are required here: https://developer.chrome.com/extensions/xhr
Of course if you still feel that the permissions are extremely fishy, you're welcome to use the desktop apps instead, or perhaps host Altair on your domain using one of the available integrations: https://altair.sirmuel.design/docs/integrations
Sorry for the confusion!
21 条评价
- 评分 1 / 5来自 Guilherme,1 年前
- 评分 5 / 5来自 chmelik,1 年前
- 评分 4 / 5来自 JLuc,1 年前
- 评分 5 / 5来自 Pei-lun,2 年前
- 评分 5 / 5来自 Firefox 用户 17569738,2 年前
- 评分 4 / 5来自 Joe,3 年前The previous revision of my review was not kind, because the extension appeared not to be working. After reading the other reviews mentioning access to "all data for all sites", I wondered if it could be that I was attempting to use the extension in a private window, which was the issue. So, although Firefox will ask you if the extension should be available in private windows, and even though you allow it, this extension still does not appear to work in private windows. It does, however, appear to work in non-private (public?) windows.
- 评分 4 / 5来自 Antonio Perez Caballero,4 年前
- 评分 3 / 5来自 Mitch,5 年前
- 评分 5 / 5来自 Firefox 用户 15056078,5 年前Eyyy, thanks for the response! I'll use the desktop client :)
~~~
This has been really useful, but the new permissions ('data on all sites') are sketching me out! Maybe I just read too many stories of popular addons getting bought by spyware companies...开发者回应
发布于 5 年前Fear not! Altair has always requested permissions for all sites but they were removed, and then re-added at v2.4.3. This is required to allow Altair send requests to your domain without getting CORS errors which is the default behavior. After the permissions were removed, there were several reported issues of Altair not working (e.g. https://github.com/imolorhe/altair/issues/1136). Of course these issues were resolved after re-adding the permissions in v2.4.3.
You can see the relevant commit trails:
Removed permission (v2.4.0): https://github.com/imolorhe/altair/commit/a0cd9fad9bdaba65966c12c8aa5fad409efdfd3c
Re-added permission (v2.4.3): https://github.com/imolorhe/altair/commit/2802c9429ebcd571ca046820dd74f2f893670fb2
You can read more on why these permissions are required here: https://developer.chrome.com/extensions/xhr
Of course if you still feel that the permissions are extremely fishy, you're welcome to use the desktop apps instead, or perhaps host Altair on your domain using one of the available integrations: https://altair.sirmuel.design/docs/integrations
Sorry for the confusion! - 评分 4 / 5来自 Firefox 用户 14801363,5 年前Queries, mutations, subscriptions, Headers are all saved for convenience. So when you get back later, you can start from what you've done.
One drawback compared to Playground is that Altair does not support multiple schema docs page. - 评分 5 / 5来自 Firefox 用户 15321375,5 年前
- 评分 5 / 5来自 torunar,5 年前
- 评分 5 / 5来自 nmarier,5 年前The extension is beautiful and has every feature one could want. The only concern I have is permissions. I'm not sure why this add-on would need to access my data for all sites.
开发者回应
发布于 5 年前Thanks for pointing that out. We don't need that permission for the addon to work actually :) - 评分 5 / 5来自 Firefox 用户 13070411,5 年前
- 评分 5 / 5来自 Firefox 用户 13839546,6 年前
- 评分 5 / 5来自 Firefox 用户 14540431,6 年前This is pretty good, but why do I have to click "reload docs" when the API changes? GraphQL APIs are supposed to change all the time, please make it reload the docs immediately. Also the app will always be online to do queries.
开发者回应
发布于 6 年前There is no mechanism to reload the docs when the APIs are updated, except maybe a polling mechanism which isn't optimal. You should create an issue on Github for this so that there can be better discussions around it.
UPDATE: There is such a mechanism now. The X-GraphQL-Event-Stream header allows you specify a stream URL that your server can use to notify Altair of changes and reload the docs for you. - 评分 5 / 5来自 Sandy,6 年前Great GraphQL tool for Firefox. Constant improvements, and super easy to use and very quick to respond to issues.
Been using it for a few months now and makes my GQL work easy.