Structuring for Authorization

Implementation of authorization

Some authorization concerns can be handled by the very structure of the data within our application, and we can use this when we design our schema.

The idea is that a single field can authenticate for fields deeper down in our query. After all, a GraphQL document is a tree; if we can have a single field act as a gatekeeper for any data that requires authorization, it could simplify our code. It would also reduce the amount of mental overhead involved in trying to remember what is and isn’t ...