Re:Migrating Netflix to GraphQL Safely
by criddell on Sunday June 18, 2023 @07:11PM
(#36385498)
For the security comment, I was thinking they were talking about authorization.
According to GraphQL, authorization belongs in the business logic layer[1].
A lot of projects ignore this advice and put it into the resolvers. This decentralized approach can be difficult to maintain and keep correct.
According to GraphQL, authorization belongs in the business logic layer[1]. A lot of projects ignore this advice and put it into the resolvers. This decentralized approach can be difficult to maintain and keep correct.
[1]: https://graphql.org/learn/authorization/