Backend Developer Forum>Questions/Help

What's the recommended approach for securing GraphQL APIs?

conradwt

conradwt

What's the recommended approach for securing GraphQL APIs?

Hi, I’m building an application that will have support for both the web and mobile. At this time, I’m using PhxGenAuth for authentication on the web. However, it appears that there’s no out-of-the-box support for API authentication.

Thus, I was wondering, what’s the recommended approach for securing GraphQL APIs these days? From the book “Craft GraphQL APIs in Elixir with Absinthe”, it appears that JWTs is a good solution to go with for now.

Finally, are there any recommended Hex authentication packages that support both session and API authentication?

1 comment
#community/phoenix/book-craft-graphql-apis-in-elixir-with-absinthe#graphql
6 914 1

Most Liked

OvermindDL1

OvermindDL1

A header token or a token passed in the message directly are the two ways I most often see.

3
Post #3

Popular Backend topics Top

PragmaticBookshelf
Backend Developer Forum>Learning Resources

Programming Phoenix 1.4
Don’t accept the compromise between fast and beautiful: you can have it all. Phoenix creator Chris McCord, Elixir creator José Valim, and...
/phoenix#pragprog#published-book/book-programming-phoenix-1-4/elixir
16 1423 3
New
PragmaticBookshelf
Backend Developer Forum>Learning Resources

Practical Programming, Third Edition
Classroom-tested by tens of thousands of students, this new edition of the bestselling intro to programming book is for anyone who wants ...
#pragprog#published-book/book-practical-programming-third-edition/python#algorithms
2 1358 0
New
DevotionGeo
Backend Developer Forum>Chat/Discussions

Mnesia vs (something like) Riak and CouchDB, differences, pros and cons, and what was your experience using them?
/erlang#riak#couchdb#mnesia
3 1593 1
New
CinderellaMan
Backend Developer Forum>Learning Resources

Create a cryptocurrency trading bot in Elixir (self-published) (book + videos)
Create a cryptocurrency trading bot in Elixir (YouTube videos, ebook pay what you want) <span class="hashtag-icon-placeholder"></span>eli...
/elixir#cryptocurrencies#algorithmic-trading
32 2136 12
New
Jsdr3398
Backend Developer Forum>Chat/Discussions

What are some great learning resources for Elixir?
I’ve recently become interested in Elixir and all it’s neat perks. And since I’m currently working on a messaging platform; elixir seems ...
/elixir
8 1855 6
New
PragmaticBookshelf
Backend Developer Forum>Learning Resources

SQL Antipatterns, Volume 1
SQL Antipatterns is a short-cut to wisdom, showing you how to avoid "easy" solutions that don't work, and be a better database developer ...
#pragprog#published-book#data-science/book-sql-antipatterns-volume-1
27 1471 4
New
Cellane
Backend Developer Forum>Chat/Discussions

Phoenix 1.6.0 Released
Phoenix 1.6.0 got released last week, with built-in authentication and mailer generators, a whole new HEEx (HTML-aware Embedded Elixir) e...
phoenixframework.org
/elixir/phoenix#framework-release-news
87 1936 29
New
PragmaticBookshelf
Backend Developer Forum>Learning Resources

Effective Haskell
Build efficient applications that exploit the unique benefits of a pure functional language, learning from an engineer who uses Haskell t...
#pragprog/haskell#published-book/book-effective-haskell
15 4341 1
New
Fl4m3Ph03n1x
Backend Developer Forum>Questions/Help

How to have custom enconding for struct using Jason?
Background I am trying to encode a structure into json format using the Jason library. However, this is not working as expected. Code L...
/elixir#json
6 2292 1
New
AstonJ
Backend Developer Forum>Questions/Help

Rails db:create error - PG::ConnectionBad: connection to server on socket "/tmp/.s.PGSQL.5432" failed: FATAL: database "_development" does not exist
If when trying to create (or recreate) your dev db with rails db:create you are getting: PG::ConnectionBad: connection to server on soc...
/rails#troubleshooting
3 1808 0
New

Other popular topics Top

DevotionGeo
Backend Developer Forum>Chat/Discussions

What is the reason behind Rust’s web framework, Rocket, not performing as well as expected in the Techempower benchmarks?
I know that these benchmarks might not be the exact picture of real-world scenario, but still I expect a Rust web framework performing a ...
/rust#web-frameworks
36 6155 11
New
axelson
Cross-Platform Dev Forum>Apps/Libraries/Tools

Obsidian – a cross platform app to help you create a knowledge base with Markdown files
I’ve been really enjoying obsidian.md: It is very snappy (even though it is based on Electron). I love that it is all local by defaul...
#macos#windows#linux/markdown#obsidian#apps
38 3782 19
New
First poster: bot
In The News

Bit – A modernized Git CLI written in Go
github.com
#git/go
1 5353 0
New
AstonJ
Code Editors

Poll: Which code editor do you use?
You might be thinking we should just ask who’s not using VSCode :joy: however there are some new additions in the space that might give V...
#polls#code-editors/vim/emacs/vscode#notepad/sublime-text#atom/textmate#codespaces#brackets#community/onivim#geany
105 4399 50
New
dimitarvp
macOS Developer Forum>Chat/Discussions

My thoughts on macOS vs Linux
Small essay with thoughts on macOS vs. Linux: I know @Exadra37 is just waiting around the corner to scream at me “I TOLD YOU SO!!!” but I...
#macos#linux
166 7374 69
New
PragmaticBookshelf
In The Spotlight

Spotlight: Paolo Perrotta (Author)
“A Mystical Experience” Hero’s Journey with Paolo Perrotta @nusco Ever wonder how authoring books compares to writing articles?...
#community#author-spotlight/book-programming-machine-learning/book-metaprogramming-ruby-2
31 3355 15
New
AstonJ
macOS Developer Forum>Chat/Discussions

How to block any website on Mac using Little Snitch
If you want a quick and easy way to block any website on your Mac using Little Snitch simply… File &gt; New Rule: And select Deny, O...
#macos#littlesnitch#how-to
5 7235 3
New
First poster: bot
Artificial Intelligence Forum

How to fix the eyes in AI-generated images
aidemos.info
0 2694 0
New
AstonJ
General Dev Chat

Chris Seaton, the creator of TruffleRuby, has died
Chris Seaton, the creator of TruffleRuby has died. It appears from suicide :cry: He left this note on Twitter on the weekend: And one...
/ruby#mental-health
4 2131 2
New
CommunityNews
In The News

Review of Linux on Minisforum V3 AMD Ryzen Tablet
A Brief Review of the Minisforum V3 AMD Tablet. Update: I have created an awesome-minisforum-v3 GitHub repository to list information fo...
mudkip.me
#review#linux#amd
0 1252 0
New
Back to top

Latest in Backend

Erlang OTP-26.2.5.11 and OTP-25.3.2.20 released!
Backend News
Quarkus 3.22.0.CR1 and 3.21.3 released!
Backend News
Crystal 1.16.1 released!
Backend News
Crystal 1.16.1 is released!
Backend News
KotlinConf 2025: Last Tickets, Epic Talks, an Evening to Remember, and More
Backend News
Clojure Deref (Apr 11, 2025)
Backend News
PostgreSQL: The Schedule is out for POSETTE: An Event for Postgres 2025!
Backend News
Haskell: GHC 9.6.7 is now available
Backend News
Erlang OTP-27.3.3 and OTP-28.0-rc3 released!
Backend News
Nest v11.0.20 released!
Backend News
Kotlin: K2 Mode in IntelliJ IDEA 2025.1: Current State and FAQ
Backend News
Nest v11.0.18 released!
Backend News
Laravel v12.0.7 released!
Backend News
Django: DSF member of the month - Öykü Gümüş
Backend News
ReqEmbed - ElixirCasts
Backend Learning Resources
V weekly.2025.16 released!
Backend News
Kotlin v2.2.0-Beta1 released!
Backend News
Kotlin: The Story Behind K2 Mode and How It Works
Backend News
Membrane Framework v1.2.3 released!
Backend News
Julia v1.11.5 released!
Backend News

View all threads ❯

Latest (all)

Erlang OTP-26.2.5.11 and OTP-25.3.2.20 released!
Backend News
Quarkus 3.22.0.CR1 and 3.21.3 released!
Backend News
Crystal 1.16.1 released!
Backend News
Crystal 1.16.1 is released!
Backend News
KotlinConf 2025: Last Tickets, Epic Talks, an Evening to Remember, and More
Backend News
Clojure Deref (Apr 11, 2025)
Backend News
PostgreSQL: The Schedule is out for POSETTE: An Event for Postgres 2025!
Backend News
Haskell: GHC 9.6.7 is now available
Backend News
So you want to use Object Storage
In The News
The business of the AI labs
In The News
Tract Postmortem
In The News
JetBrains IDEs Go AI: Coding Agent, Smarter Assistance, Free Tier | The JetBrains Blog
In The News
How Nintendo Bled Atari Games to Death
In The News
Erlang OTP-27.3.3 and OTP-28.0-rc3 released!
Backend News
Nest v11.0.20 released!
Backend News

View all threads ❯

We ❤️ helpful members!

We reward our most helpful members via our MOTM scheme - by giving away a whopping 25 books per year!

Member of the Month

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

Categories:

Popular Portals

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

We're in Beta

About us Mission Statement See our Roadmap