GraphQL Authentication and Authorization at Scale
watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/graphql-authentication-and-authorization-at-scalesummary
Covers Unity’s approach to authentication and authorization for a federated GraphQL setup: using GraphQL Federation to expose business functionality via a centralized schema, running a Unity Orth endpoint and central Orth directive definitions, and handling downstream service auth with an AuthPolicyHandler and AuthDirective. Describes using Mercurius (and its Auth plugin), custom hooks and an Orth plugin to simplify configuration and scaling, and mentions ongoing work to add a filter-schema feature and demonstrate different access levels.
AI-written summary · about
related talks
36mGraphQL Federation - The @key to Your Platform API Strategy
40mAuthentication and Authorization in GraphQL
25mThe Root of Auth Thingz
27mDesigning Secure GraphQL APIs : Not a Paradigm Shift but Handling Complexity
48mApollo Federation: Connecting GraphQL Microservices
06mEscape the GraphQL Monolith
17mThe year ahead for GraphQL Federation: Combining APIs for the AI era.
51mAPI Security: Securing GraphQL without going around in circles