MC-31987: Varnish graphql cache has to skip authenticated requests

- Modified vcl to not cache authorized requests for graphql

Author: Prabhu Ram

app/code/Magento/PageCache/etc/varnish4.vcl

@@ -108,6 +108,11 @@ sub vcl_recv {
         #unset req.http.Cookie;
     }
 
+    if (req.method == "GET" && req.url ~ "/graphql" && req.url ~ "query=" && req.http.Authorization ~ "^Bearer") {
+          # Authentificated customers should not be cached by default
+          return (pass);
+    }
+
     return (hash);
 }
 
@@ -123,7 +128,7 @@ sub vcl_hash {
         hash_data(server.ip);
     }
 
-    if (req.url ~ "/graphql") {
+    if (req.method == "GET" && req.url ~ "/graphql" && req.url ~ "query=") {
         call process_graphql_headers;
     }
 

app/code/Magento/PageCache/etc/varnish5.vcl

@@ -109,6 +109,11 @@ sub vcl_recv {
         #unset req.http.Cookie;
     }
 
+    if (req.method == "GET" && req.url ~ "/graphql" && req.url ~ "query=" && req.http.Authorization ~ "^Bearer") {
+      # Authentificated customers should not be cached by default
+      return (pass);
+    }
+
     return (hash);
 }
 
@@ -130,7 +135,7 @@ sub vcl_hash {
     }
     /* {{ design_exceptions_code }} */
 
-    if (req.url ~ "/graphql") {
+    if (req.method == "GET" && req.url ~ "/graphql" && req.url ~ "query=" ) {
         call process_graphql_headers;
     }
 }

app/code/Magento/PageCache/etc/varnish6.vcl

@@ -109,6 +109,11 @@ sub vcl_recv {
         #unset req.http.Cookie;
     }
 
+    if (req.method == "GET" && req.url ~ "/graphql" && req.url ~ "query=" && req.http.Authorization ~ "^Bearer") {
+        # Authentificated customers should not be cached by default
+        return (pass);
+    }
+
     return (hash);
 }
 
@@ -130,7 +135,7 @@ sub vcl_hash {
     }
     /* {{ design_exceptions_code }} */
 
-    if (req.url ~ "/graphql") {
+    if (req.method == "GET" && req.url ~ "/graphql" && req.url ~ "query=") {
         call process_graphql_headers;
     }
 }