Authorization Patterns in GraphQL
watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/authorization-patterns-in-graphqlsummary
Covers authorization strategies for GraphQL applications, focusing on delegating authorization to business logic rather than sprinkling checks in resolvers. Describes using resolver-layer checks combined with database-level filtering, abstracting authorization behind a centralized API, and using GraphQL custom directives and permission fields to simplify and reduce repetitive permission checks.
AI-written summary · about
related talks
40mAuthentication and Authorization in GraphQL
27mAuthorization in the GraphQL era
23mAuthorization in GraphQL: Peanut Butter and Chocolate
27mDesigning Secure GraphQL APIs : Not a Paradigm Shift but Handling Complexity
25mThe Root of Auth Thingz
32mMind your GraphQL APIs: how to reduce their attack surface
24mUnderstanding GraphQL Security: Protecting Your Server from Abuse
21mGraphQL Authorization with Open Policy Agent