GraphQL Summit 2023
2023-10-09..2023-10-13
San Diego, United States
[GraphQL Summit 2022, GraphQL Summit 2023, GraphQL Summit 2025]
as the organisers put it
Learn more about upcoming Apollo GraphQL events, both virtual and on-site, across the globe.
| title | author | length |
|---|---|---|
| Panel - Things to Consider When Auditing Your GraphQL Infrastructure for Security | Luca Carettoni, John Villamil, Phil Prasek | 32m |
Panel summarizes hands-on lessons from auditing the Apollo Router: a 20 person-day review finds six issues (two DoS, three medium, a CSRF vector) and prompts a… | ||
| Panel - Championing Your Supergraph After Launch, Now What? | 27m | |
After launch the focus shifts to measurable operations: set up metrics, tracing and dashboards, track latency, cache hit rates and error rates over time, and… | ||
| Moving Data From Graph to the Warehouse, A Configuration Driven Approach | Bernardo Gomez Palacio | 25m |
Netflix builds a configuration-driven pipeline that streams federated GraphQL types into the warehouse by listening to CDC events, enriching them via a… | ||
| Build a GraphQL API Gateway the Hard Way | Jack Sellwood, Brian George | 19m |
Demo and roadmap for GraphOS Cloud Dedicated: a fully managed, always-on Apollo router fleet that runs in your AWS region (US East 1, EU West 1, East Central… | ||
| GraphQL and CQRS, a Perfect Fit? | Gerard Klijs | 22m |
A concrete gift card demo implements CQRS with event sourcing: commands (issue, redeem, cancel) create events, projections live in MongoDB, and an Axon/Exon… | ||
| Colocating & Composing Data Dependencies with Fragments | Austin Chauncey | 20m |
Argues for colocating GraphQL fragments on components and composing them into root queries, demonstrating an Apollo Server + React demo, GraphQL Codegen for… | ||
| Authorization in GraphQL: Peanut Butter and Chocolate | Sam Scott | 23m |
A small Python + Strawberry GraphQL app uses a middleware that inspects the schema and query to infer required checks, prefetches permission data, batches… | ||
| Optimistic UI updates with Apollo Client and React | Richard Carrigan | 23m |
Shows a React + Apollo Client front end with Apollo Server and Node implementing optimistic UI for full CRUD and drag‑and‑drop reordering. Implements cache… | ||
| How Intuit Handled the Busiest Time of Year with Apollo Router & Service Mesh | Rama Palaniappan | 26m |
Intuit replaces Apollo Gateway with Apollo Router (Rust) using Apollo Federation 2 and a service mesh on Kubernetes, serving ~90K requests/sec, 2K clients and… | ||
| Leveraging GraphQL for Continual Learning in Real-Time ML Systems | Aryan Magoon | 31m |
Claims a producible pipeline that turns GraphQL mutations into low-latency online features, uses Kafka to stream session events, Flink to do in-flight feature… | ||
| Designing Secure GraphQL APIs : Not a Paradigm Shift but Handling Complexity | Anamitra Majumdar | 27m |
GraphQL orchestration at Intuit secures a QuickBooks supergraph that spans 80 third-party APIs used by 17,000 third-party apps producing ~250,000… | ||
| GraphQL Authorization with Open Policy Agent | Mike Cohen | 21m |
Indeed centralizes field-level GraphQL authorization using Open Policy Agent and Rego policies deployed as sidecars, with about 200 subgraphs each owning a… | ||
| How Thinkific is Exposing a Public Supergraph | Fillipe Massuda | 20m |
Thinkific builds a centralized public supergraph that composes subgraphs from Rails engines and microservices, using Apollo Federation and Apollo Studio… | ||
| Panel - Graph Leadership - Scaling the Graph Across Your Org and Platform | Leah Hurwich | 44m |
Panelists compare concrete outcomes: NielsenIQ is early adopter, Strava (under 200 engineers) switches REST to GraphQL two years ago and now has most teams… | ||
| The Wonders of Onboarding: The Ultimate API Management Adventure | Jesper Rasmussen | 26m |
Scaling a federated supergraph relies on concrete practices not slogans: Spotify runs an internal linting tool plus a publicly available style guide… | ||
| Let's Build a Supergraph Using ChatGPT | Patrick Arminio | 26m |
Builds a Supergraph prototype by feeding ChatGPT prompts to generate GraphQL schemas, comparing GPT‑3.5 (fast, often messy) with GPT‑4 (slower, follows… | ||
| Locally Debugging Supergraphs at Dow Jones with Rover CLI Extensions | Ethan Ruoff | 14m |
Dow Jones runs a 17-subgraph supergraph (422 types, ~3,000 fields) serving ~11 million CDN-passed requests/day and struggles to test combinations locally. The… | ||
| Best Practices for Federated GraphQL: Lessons from Teya | Christian Otieno | 26m |
Saltpay migrates multiple BFFs into a federated supergraph with TypeScript, claiming faster team velocity and clearer ownership by splitting schema into atomic… | ||
| Security Automation For GraphQL | Anthony Trummer | 26m |
Advocates shifting security left and automating detection across SAST, SCA and DAST, showing concrete tools and results: semgrep (127 files, 1,600 rules) finds… | ||
| Panel - Fortune 100 Graphs - Powering Today's Need and Tomorrow's Trends | Dan Boerner | 42m |
Four large orgs describe concrete results: PlayStation runs a retail commerce GraphQL backend in production for three years, serving tens of millions of users… | ||
| The Secrets to Wayfair’s Graph Success from Inception to General Availability | Leah Hurwich Adler | 14m |
Wayfair builds a Federated GraphQL platform with an opinionated Gateway, pilot programs and governance bodies, taking two years to GA after iterating through… | ||
| Isolated Federated Schema Integration Testing with Router | Serey Morm | 27m |
Wayfair describes an isolation-first workflow that composes branch-specific supergraphs called feature variants and serves them via per-variant Router… | ||
| Supergraph AuthZ Security in Apollo Router with External Co-processing | Jay Barr, Manoj Sukumaran | 27m |
Enterprise supergraph enforces per-client ABAC at the edge using Apollo Router external co-processing and Open Policy Agent (OPA) with Rego policies; a broker… | ||
| Building a Production Ready Serverless Graph with Cloud Router | Daniel Abdelsamed | 25m |
Shows a fully serverless Apollo supergraph using cloud router and AWS Lambda with CDK snippets, security notes, and working code samples. Demonstrates Lambda… | ||
| GraphQL Performance at Shopify | Gui Vieira, Rob Van Gennip | 27m |
Shopify profiles their Ruby GraphQL stack and switches concrete pieces: replacing GraphQL‑Ruby’s pure Ruby parser with a C/YAK parser yields about 7× parsing… | ||
| GraphQL Directives: An Under Utilized Power at your Fingertips | Raman Lally | 24m |
A real incident-response story: a GraphQL server in front of a legacy API receives malicious strings in an ID field, so a sanitized directive is added to… | ||
| Living on the Edge: Designing Relational Data in GraphQL | Amanda Aizuss, Sofia Carrillo | 27m |
Builds a GraphQL schema for authors readers and books using Relay cursor pagination and explicit connection and Edge types, moves denormalized totals onto… | ||
| Query Now, Render Later: Leveraging @defer for Efficient Data Delivery | Alessia Bellisario | 25m |
@defer lets a client mark an inline fragment to be deprioritized so an initial JSON chunk returns fast and slower fields arrive later via an HTTP… | ||
| How NOT to Build a Supergraph! | Kyle Schrade Sr. | 23m |
Clear naming rules matter: PascalCase for types, camelCase for fields, SCREAMING_SNAKE_CASE for enum values; return linked objects instead of only IDs to avoid… | ||
| Understanding GraphQL Security: Protecting Your Server from Abuse | Erik Guzman | 24m |
Covers concrete defenses: disable introspection and field suggestions, enforce a query depth limit (e.g. 5–10), and implement per-field complexity costs… | ||
| Stranger Graphs - Building Federated Workflows with Shared Components | Gabriel Cura-Castro | 27m |
Claim: building a Federated design system of domain-specific components on top of GraphQL federation cuts UI duplication and speeds delivery. Uses GraphQL… | ||
| GraphQL Security Best Practices and Hardening | Andrew Konstantinov | 29m |
Covers concrete defenses: remove version headers and disable introspection to slow fingerprinting, use Cloudflare/WAFs but expect bypasses, and apply enable… | ||
| Playing to Win: Why Netflix Platform Engineering Chose Fed GraphQL | Matt Debergalis, Bruce Wang | 28m |
Netflix replaces multiple client-specific APIs with a unified consumer Edge built on GraphQL and Federation v2, bootstrapping with a monolithic DGS that ported… | ||
| How to Use Suspense and GraphQL with Apollo to Build Great User Experiences | Jerel Miller | 28m |
Demonstrates migrating an app to Apollo Client 3.8 by replacing useQuery with useSuspenseQuery, removing loading booleans so components treat data like… | ||
| Integrating GraphQL with AI | Abrahm Coury | 24m |
Prototype converts plain English into GraphQL by using OpenAI Codex via the OpenAI completions endpoint and a Python pipeline, generates a query file, posts it… | ||
| Panel - Modernization Stories - Monoliths, Migrations and Mergers | Mark Faga | 47m |
Panelists describe migrating by inserting an Apollo Router drop-in in front of a working monolith to get Federation in prod fast, then incrementally extracting… | ||
| Accelerating GraphQL API Development with Schema Storming and Code-first Implementation | Sam Combs | 31m |
Claims that code-first classes plus test-driven checks solve resolver/schema drift and that visual schema storming workshops produce precise UI-to-schema… | ||
| Caching Strategy for High Volume Personalized Content Requests | Emily Voytek, Jamie F | 24m |
MLB moves from in-memory defaults to a shared Redis cache, APQ + GET requests through CDN, and response-cache plugin to handle spikes that reached ~15 million… | ||
| A New Paradigm: How Do I Optimally Break my UI Into Queries? | Amanda Olsen | 29m |
Shows a concrete tradeoff: attaching one query per tiny component produced UI and schema bloat (example: 607 components on one page, duplicated review and… | ||
| 200 NOT OK: High-Resolution Observability | Joey Nenni | 21m |
HTTP status codes fail for GraphQL because of partial success, so use OpenTelemetry plus an Apollo server plugin that parses responses, increments a counter… | ||
| Supergraph Saving Lives | David Emanuel Sarabia | 27m |
Startup moves a monolith to Apollo Federation Supergraph and ships a request engine (2.5 months planning, ~3 weeks build) and a survey/assessment engine (2.5… | ||
| Realtor.com's Technological & Cultural Transformation with GraphQL | Suzy Julius, Cabe Waldrop | 34m |
Realtor.com migrates from hundreds of inconsistent REST endpoints to an Apollo GraphQL supergraph with Federation, building automated subgraph templates, a… | ||
| Federated Subscriptions for Real-time Applications | Korinne Alpers | 37m |
Apollo adds native Federated Subscriptions to GraphOS: the router executes subscription plans across subgraphs, supports multipart subscriptions over HTTP… | ||
| GraphQL Summit Keynote | Matt Debergalis | 42m |
Overview of Apollo’s 2023 roadmap and field results focusing on supergraph adoption, tooling, and ops. Announces Federation 2 and an open standards… | ||
| nothing matches | ||