Developed by Facebook in 2012, GraphQL has rapidly become one of the <a href="https://graphql.org/users/">most popular query languages</a> for APIs nowadays. Even though it was created for internal use only, Facebook realized the importance of GraphQL becoming <a href="https://dev.to/tamerlang/a-brief-history-of-graphql-2jhd">open source in 2015</a>. Mobile applications often have difficulties with slow network connections, and that is when GraphQL becomes helpful. Using GraphQL allows you to fetch all the data that you need with only one request and more importantly you get exactly what you ask for. The fact that it can be used with any backend framework and programming language, makes it an excellent choice for every application.<img src="https://cyberlabimages.s3.eu-central-1.amazonaws.com/Client-(1).png" style="width: 700px; height: 394px;" alt="Understanding GraphQL: Key Concepts and How It Stacks Up Against REST API"><h2 style="text-align: left;">Querying a GraphQL server </h2>There are three types of operations that define the interaction with the data in your GraphQL server: <ul><li>queries</li><li>mutations</li><li>subscriptions.</li></ul> <h3 style="text-align: left;">Queries </h3>Defined by a keyword query, they are used to fetch data from the server. Their structure usually includes query name, fields you want to fetch, and arguments. The result has the same shape as the query itself. They can refer to a field, but also to an object. Fields can have zero or more arguments which can be of different types. Unlike mutations, they don’t cause side effects on the server. <img src="https://cyberlabimages.s3.eu-central-1.amazonaws.com/Screenshot-2024-07-12-at-08.11.45.png" alt="Understanding GraphQL: Querying a GraphQL server"><h3 style="text-align: justify;">Mutations </h3>Defined by a keyword mutation, they are used to make changes on the server. They allow you to make data modifications, by either inserting, updating, or deleting the data. The structure generally includes the mutation name, input arguments, and the fields you want to return after the mutation is performed. <img src="https://cyberlabimages.s3.eu-central-1.amazonaws.com/Screenshot-2024-07-12-at-08.32.28.png" alt="Understanding GraphQL: Mutations" style="width: 1091px; height: 317px;"> <h3 style="text-align: justify;">Subscriptions </h3>Defined by a keyword subscription, they are used for real-time data updates. They allow a client to subscribe to a specific event or data change. Typically they use web sockets for communication. They are crucial for applications requiring live or dynamic data, such as chat applications, notifications, live sports scores, etc.&nbsp; <h4 style="text-align: justify;"> Subscription workflow:</h4><ol><li>The client subscribes to a specific event using a subscription operation&nbsp; </li><li>The server detects an event (such as a data change) that matches the subscription criteria </li><li>The server sends the updated data to all subscribed clients</li></ol> <h2>Types in GraphQL</h2>GraphQL is a strongly typed language, every query has its own set of arguments which can be of many different types.&nbsp; <h3 style="text-align: justify;">Object types and fields </h3>The most basic components of GraphQL schema represent a collection of related fields. They are used to define entities in your schema and the relationships between them.<img src="https://cyberlabimages.s3.eu-central-1.amazonaws.com/Screenshot-2024-07-12-at-08.37.52.png" alt="Understanding GraphQL: Object types and fields" style="width: 1094px; height: 262px;"> <h3 style="text-align: justify;">Scalar types </h3>Default scalar types in GraphQL are: <ul><li>Int: A signed 32‐bit integer.</li><li>Float: A signed double-precision floating-point value.</li><li>String: A UTF‐8 character sequence.</li><li>Boolean: values are either true or false.</li><li>ID: The ID scalar type represents a unique identifier. </li></ul> GraphQL also allows you to define custom scalar types using a keyword scalar. <img src="https://cyberlabimages.s3.eu-central-1.amazonaws.com/Screenshot-2024-07-12-at-08.39.06.png" alt="Understanding GraphQL: Scalar Types" style="width: 1091px; height: 119px;"><h3 style="text-align: justify;">Lists, interfaces, and non-nulls </h3>The list type represents an array of certain types. They are denoted using square brackets [ ]. Interface is an abstract type that includes a certain set of fields that a type must include to implement the interface. Non null type indicates that a field cannot be null. They are denoted using exclamation mark !&nbsp; <h3 style="text-align: justify;"> Enums and union types </h3>Enumeration types also called enums are a special kind of scalar that is restricted to a particular set of allowed values. GraphQL service implementations in various languages will have their own language-specific way of dealing with enums. Union types are used to define a new type that lists out the different possible object types it can resolve to. They are similar to interfaces but they don’t define any common fields. <h2 style="text-align: justify;">Validation</h2> GraphQL uses a type system to check if a query is valid or not. It can be implemented at various stages of the GraphQL workflow, including during schema definition, query parsing, and query execution. The are three types of validation in GraphQL: <ul><li>Syntax validation - ensures that schema follows grammar rules, which includes correct syntax for fields, arguments, operations, etc.</li><li>Semantic validation - verifies semantics of GraphQL documents against a GraphQL schema, and ensures that fields, arguments, and types are valid according to the schema definition.</li><li>Input validation - validates input data provided in GraphQL mutations against predefined rules like data types, required fields, etc.</li></ul> <img src="https://cyberlabimages.s3.eu-central-1.amazonaws.com/Screenshot-2024-07-12-at-14.43.14.png" alt="Understanding GraphQL: Validation" style="width: 1090px; height: 203px;"><h2>Execution </h2>After the process of validation, a GraphQL query is being executed by a GraphQL server. The result of execution is typically a JSON, but it can also be XML. Each field in the GraphQL query is backed by a resolver function. Resolver function typically has four parameters: <ol><li> parent - return value of resolver for a parent field</li><li>args - argument passed to the field</li><li>context - value which is provided to every resolver, contains important context information</li><li>value - holds field-specific information relevant to the current query as well as the schema details </li></ol> There are a couple of different types of resolvers: <ul><li>Asynchronous resolvers - typically communicate with the database, and execute operations on it</li><li>Trivial resolvers - return data that is already available, such as fields of an object</li><li>Scalar coercion - GraphQL can coerce scalar values returned by resolvers to match the expected type in the schema</li><li>List resolvers - resolvers can return lists of values, which may include lists of Promises. GraphQL waits for all Promises to resolve before proceeding.</li></ul> <h2>GraphQL vs RestAPI </h2>GraphQL and <a href="https://blog.postman.com/rest-api-examples/" target="_blank">REST API</a> are two popular paradigms for building <a href="https://www.ibm.com/topics/api" target="_blank">APIs</a>, each with its own strengths and use cases.<img src="https://cyberlabimages.s3.eu-central-1.amazonaws.com/Untitled-design-(6).png" alt="GraphQL vs RestAPI"><h3>Similarities </h3><ul><li>Sharing the same architectural principles</li><li>Using HTTP as a transport layer</li><li>Using the standard data formats for communication (JSON, XML, etc)</li><li>Able to be extended with middleware to add functionalities like logging, caching, and authentication.</li></ul> <h3>Differences</h3><ul><li> GraphQL enforces the use of schema, unlike RestAPI</li><li>RestAPI is still the most popular standard for building APIs</li><li>GraphQL only uses the 200 status code for all responses</li><li>GraphQL has built-in support for&nbsp; introspection, whereas for&nbsp; RestAPI you have to use specifications like <a href="https://swagger.io/specification/" target="_blank">OpenAPI</a> or <a href="https://www.asyncapi.com/en" target="_blank">AsyncAPI</a></li></ul> <h2>Advantages and disadvantages of GraphQL </h2>Some of the benefits of GraphQL have already been mentioned in this article - accessing data with a single endpoint, flexible data retrieval, network performance, and built-in introspection. GraphQL APIs are self-documenting due to their strongly typed schema. This schema provides clear and detailed documentation of available data types and relationships, making it easier for developers to understand and use the API. GraphQL APIs can evolve without versioning. New fields and types can be added without impacting existing queries, allowing for seamless API evolution and reducing the need for managing multiple API versions. However, the learning curve of GraphQL can be quite challenging, compared to other alternatives. It requires a good understanding of its schema and query language. Maintaining the GraphQL schema can become complex, especially as the API grows and evolves. Implementing authorization and authentication in GraphQL can be more complex compared to REST, as each field and query may require specific access controls. The introspective nature of GraphQL can expose the entire schema to clients, potentially revealing sensitive information if not properly secured. <h2>Conclusion&nbsp; </h2>GraphQL presents a modern and efficient approach to API development, offering several advantages over traditional APIs. Its ability to allow clients to request precisely the data they need reduces unnecessary data transfer and improves overall efficiency. This flexibility, combined with a strong typing system and versionless API approach, fosters clearer communication between clients and servers and reduces development overhead. However, GraphQL does come with its challenges, including a learning curve for developers accustomed to RESTful APIs, complexities in caching and server implementation, and potential issues with over-fetching data. Despite these challenges, GraphQL's benefits make it a compelling choice for projects that prioritize performance, flexibility, and streamlined data retrieval. ⁤See you in our next <a href="https://cyberlab.rs/blog" target="_blank">blog </a>with a new topic!

In our latest blog post, we delve into GraphQL, a powerful query language for APIs that enables more efficient data fetching and manipulation.