In part 1 we discussed the problem of securing a GraphQL API. We introduced a security model to define ACL policies at the same time of the data model, in order to demand all security checks to the layer in charge of loading and composing data. In this second part…

One of the most critical aspects in developing a GraphQL backend is creating a security layer that regulates data access no matter where graph navigation begins. GraphQL promote the design of a connected data model that you expose in form of a graph with multiple entry points. Each query allows…