add --insecure/-k flag to allow insecure requests

The flags are based on the same ones in cURL. With the flag added, it will create an https agent
that does not reject bad certificates.

fix hasura#143

src/client.js

@@ -15,9 +15,11 @@ const makeClient = options => {
     websocket,
     headers,
     hook,
+    allowInsecure,
   } = options;
 
   const clientContext = {
+    httpsAgent: null,
     endpoint,
     headers: cloneObject(headers || {}),
     websocket: {
@@ -30,6 +32,15 @@ const makeClient = options => {
     },
   };
 
+  if (allowInsecure) {
+    try {
+      const nodeHttps = require('node:https');
+      clientContext.httpsAgent = new nodeHttps.Agent({rejectUnauthorized: false});
+    } catch (e) {
+      console.error(e);
+    }
+  }
+
   const executeQuery = async (queryOptions, successCallback, errorCallback) => {
     const {
       query,
@@ -53,6 +64,7 @@ const makeClient = options => {
           method: 'POST',
           headers,
           body: JSON.stringify({query, variables: (variables || {})}),
+          agent: clientContext.httpsAgent,
         },
       );
       const responseObj = await response.json();