Merge branch '2.2' into 2.3

Author: dunglas

features/graphql/authorization.feature

@@ -15,7 +15,7 @@ Feature: Authorization checking
       }
     }
     """
-    Then the response status code should be 400
+    Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/json"
     And the JSON node "errors[0].message" should be equal to "Access Denied."
@@ -35,7 +35,7 @@ Feature: Authorization checking
       }
     }
     """
-    Then the response status code should be 400
+    Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/json"
     And the JSON node "errors[0].message" should be equal to "Access Denied."
@@ -50,7 +50,7 @@ Feature: Authorization checking
       }
     }
     """
-    Then the response status code should be 400
+    Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/json"
     And the JSON node "errors[0].message" should be equal to "Only admins can create a secured dummy."

features/graphql/mutation.feature

@@ -260,7 +260,7 @@ Feature: GraphQL mutation support
       }
     }
     """
-    Then the response status code should be 400
+    Then the response status code should be 200
     And the response should be in JSON
     And the header "Content-Type" should be equal to "application/json"
     And the JSON node "errors[0].message" should be equal to "name: This value should not be blank."

src/GraphQl/Action/EntrypointAction.php

@@ -67,7 +67,7 @@ public function __invoke(Request $request): Response
             $executionResult = new ExecutionResult(null, [$e]);
         }
 
-        return new JsonResponse($executionResult->toArray($this->debug), $executionResult->errors ? Response::HTTP_BAD_REQUEST : Response::HTTP_OK);
+        return new JsonResponse($executionResult->toArray($this->debug));
     }
 
     private function parseRequest(Request $request): array