Unable to fetch schema with GraphQL with introspection enabled.

[Nitish Patel]

So I was trying to set up GraphQL scan in Zap Desktop (2.12.0).
I have this endpoint <hidden>, which has introspection enabled. Postman can successfully fetch the schema.
When I try to do that in ZAP, however, it's not sending any POST request.

So this is what I've done so far:
I set up the Endpoint and Schema URL, which are basically the same.

 
2023-01-25.png
Then when I hit the import button, it shows me this error and it also makes a GET request to the endpoint.

 
Screenshot (29).png
Now I don't remember it for sure, but ZAP was making a POST request for the schema a while ago because the endpoint was working fine.
Anyways, shouldn't ZAP make a POST request with the introspection query to fetch the schema?

This is the response of the get query it's making

Screenshot (30).png

I've also tried to tweak the option in GraphQL settings, but they have no effect on this behaviour. Changed the Request method, but it doesn't change anything so far.

Screenshot (31).png

Am I missing anything or if there is another way we should scan GraphQL with introspection enabled? Please help. Thank you :) 

[Simon Bennetts]

Are there any errors in the zap.log file?

https://www.zaproxy.org/faq/somethings-not-working-what-should-i-do/#check-the-log-file

Cheers,

Simon

[Nitish Patel]

Hi Simon, Thanks for the reply.
Apparently not, I don't see any errors in the log file. Here is a log file after the above process on a fresh ZAP install.

[ricekot]

Hello,

When you want to use introspection to import a GraphQL schema, you only need to specify the endpoint URL.

The Schema URL should be specified when you have a schema hosted somewhere (e.g. https://example.com/schema.graphql).

Best regards,
Akshath