This plugin adds a query locking system to a WPGraphQL API by implementing persisted GraphQL queries. It is designed for developers and administrators who need to secure their GraphQL endpoint in a headless CMS architecture, preventing unauthorized or malicious queries from being executed.

• Persisted Query Support: Stores query strings on the server, allowing clients to send only a unique query ID or hash. This reduces request size and enables the use of GET requests for better caching.
• Query Lock Mode: When activated, the API rejects any query not already saved in its persisted list. This creates a strict allowlist, blocking new or unexpected queries to enhance security.
• Client Compatibility: Works with standard GraphQL clients that support persisted queries, including Apollo Client, by accepting a queryId parameter alongside the operation name.
• Administrative Control: Persisted queries are managed via a custom post type in the dashboard, typically visible only to administrators. A settings screen is provided to manage the lock mode option.
• Customizable Storage: Developers can filter where queries are loaded from, such as a local JSON file, using the graphql_lock_load_query hook for more controlled deployment workflows.