Security

  • Configuration - Configuration of JSON Web Token (JWT) authentication with encoded or decoded JWTs.

  • Authentication - Explicit authentication for different operations on different parts of your schema with the @authentication directive.

  • Authorization - Rule-based authorization filtering and validation with the @authorization directive.

  • Subscriptions authorization - Rule-based authorization for subscriptions with the @subscriptionsAuthorization directive.

  • Impersonation and user switching - How to set up impersonation and user switching features.

  • Operations - GraphQL query examples on how to trigger the evaluation of different authentication and authorization rules.