4 ms·
What's its authorization story? More generally, how good actually is authorization in graphql? Official docs seem to essentially say "not our problem!", while
by vemv 9y ago
What's its authorization story?
More generally, how good actually is authorization in graphql?
Official docs seem to essentially say "not our problem!", while various tutorials say "here's the best hack we could come up with".
(just my impression. I really want to believe in graphql, but often the topic appears mostly bypassed)
- pfooti 9y agoLast I looked for postgraphile, they suggest you hand all that off to row-level authorization mechanisms, which admittedly got a lot more performant in postgres 10.