We can't find the internet
Attempting to reconnect
Something went wrong!
Hang in there while we get back on track
GraphQL Authorization Panel Discussion, GraphQL Galaxy 2021
Explore the complexities of GraphQL authorization and best practices for implementing role-based and attribute-based access control in this panel discussion.
- Authorization should be integrated early in the application development process.
- Role-based access control (RBAC) and attribute-based access control (ABAC) are two popular approaches for authorization.
- GraphQL allows for flexible and efficient querying, but it also introduces complexities in authorization.
- Authorization should be centralized and consistent across services, but this is often difficult to achieve.
- The 90/90 rule applies to GraphQL authorization: 90% of the time, authorization is simple and straightforward, but 10% of the time, it becomes complex and challenging.
- Implementing authorization at the gateway level can help to simplify and centralize authorization.
- Embedded systems and microservices can make authorization challenging, but GraphQL can help to simplify this by providing a centralized API.
- ABAC allows for more fine-grained permissions and is well-suited for complex authorization scenarios.
- Role-based schemas and data loading can help to simplify authorization.
- Consistency across services is crucial for authorization, but this can be difficult to achieve.