It depends, and might be different across APIs. Because OpenAPI spec allow you to use different methods of authentication (general query param, per-endpoint qu

It depends, and might be different across APIs. Because OpenAPI spec allow you to use different methods of authentication (general query param, per-endpoint query param or authentication via headers). So if it's per-operation or part of the endpoint, it will be converted into a graphql argument as part of the operation. If it's a general authentication method for the whole OpenAPI file, like with headers, Mesh allow to to configure it as part of your configuration explicitly, or load it from an environment variables, and if it's a dynamic token you can do interpolations like `Authorization: {context.authToken}` and it will take it from the execution context every time.