Backend>Questions

What's the recommended approach for securing GraphQL APIs?

conradwt

conradwt

What's the recommended approach for securing GraphQL APIs?

Hi, I’m building an application that will have support for both the web and mobile. At this time, I’m using PhxGenAuth for authentication on the web. However, it appears that there’s no out-of-the-box support for API authentication.

Thus, I was wondering, what’s the recommended approach for securing GraphQL APIs these days? From the book “Craft GraphQL APIs in Elixir with Absinthe”, it appears that JWTs is a good solution to go with for now.

Finally, are there any recommended Hex authentication packages that support both session and API authentication?

1 comment
#community/phoenix/book-craft-graphql-apis-in-elixir-with-absinthe#graphql
6 986 1

Most Liked

OvermindDL1

OvermindDL1

A header token or a token passed in the message directly are the two ways I most often see.

3
Post #3

Where Next?

View thread on forum
View Craft Graphql Apis In Elixir With Absinthe's book portal
Post errata for this book
Post a suggestion for this book
Post a question about this book
Post a review about this book
phoenix
community
graphql
Home Backend>Questions
#community/phoenix/book-craft-graphql-apis-in-elixir-with-absinthe#graphql
6 992 1
Last post

Popular Backend topics Top

jaimeiniesta
Backend>Questions

Screenshots as a service
I maintain a project that lists hundreds of thousands of web pages, and I’d like to show a screenshot for each web page. There are alread...
#screenshots
2 685 1
New
gagan7995
Backend>Questions

Please tell me how to write a query for this in nodejs
API 4 Path: /user/following/ Method: GET Description: Returns the list of all names of people whom the user follows Response [ { ...
/nodejs
7 2930 3
New
MarkIden
Backend>Questions

What is better to start study GO ? Book or course?
Hi, Recommend pls your favorite learning resources in Go, with best books, podcasts etc.
/go
6 1037 5
New
Fl4m3Ph03n1x
Backend>Questions

Elixir Witchcraft IO monad?
Background I have recently been delving into more functional code. My objective right now is to get something similar to the IO Monad (in...
/elixir#monads
3 726 1
New
Ora2pgnewbie
Backend>Questions

Is there a UI for Ora2Pg?
Wanted to check if there is a UI available to use Ora2pg tool.
#postgres/postgresql#ora2pg
2 1203 2
New
Fl4m3Ph03n1x
Backend>Questions

How to typespec guards in a human friendly way?
Background I am a fan of dialyzer and friends (looking at Gradient) and I try to have sepcs in my code as much as I can. To this end, I a...
/elixir#types#dialyzer
3 649 1
New
pillaiindu
Backend>Questions

What's wrong with my Phoenix LiveView code?
Currently reading the book “Programming Phoenix LiveView”. At the end of the Chapter 1, I’m trying to solve the guess game. If the user ...
/elixir/phoenix#liveview
6 674 4
New
pillaiindu
Backend>Questions

What is the difference between using `:references` and `:belongs_to` in a generate command in Rails?
What is the difference between using :references and :belongs_to in the following command? bin/rails generate scaffold LineItem product:...
/ruby/rails
5 362 2
New
Fl4m3Ph03n1x
Backend>Questions

Are there any text-to-speech ai tools available using elixir?
Background As I often do, I read books to learn and improve myself. I also enjoy teaching and helping others when I can, so this is somet...
/elixir
6 104 3
New
apoorv-2204
Backend>Questions

Anyone know how to get into Go from an Elixir background?
Anyone know how to get in golang? I am from elixir background?.
/elixir/go
3 100 1
New

Other popular topics Top

DevotionGeo
Backend>Chat

What is the reason behind Rust’s web framework, Rocket, not performing as well as expected in the Techempower benchmarks?
I know that these benchmarks might not be the exact picture of real-world scenario, but still I expect a Rust web framework performing a ...
#web-frameworks/rust
36 6421 11
New
siddhant3030
General Dev>Dev Chat

Which vertical monitor do you use?
I’m thinking of buying a monitor that I can rotate to use as a vertical monitor? Also, I want to know if someone is using it for program...
#monitors#programming
51 4189 20
New
PragmaticBookshelf
Game Dev>Learning Resources

Apple Game Frameworks and Technologies
Design and develop sophisticated 2D games that are as much fun to make as they are to play. From particle effects and pathfinding to soci...
pragprog.com
#pragprog#ios#game-dev#macos/swift#published-book#apple/book-apple-game-frameworks-and-technologies
30 3525 10
New
AstonJ
General Dev>Code Editors

Poll: Which code editor do you use?
You might be thinking we should just ask who’s not using VSCode :joy: however there are some new additions in the space that might give V...
#community#polls/vim/emacs#code-editors/vscode#notepad/sublime-text#atom/textmate#codespaces#brackets/onivim#geany
105 4499 50
New
AstonJ
General Dev>Hardware

Seen any cool new keyboards?
We have a thread about the keyboards we have, but what about nice keyboards we come across that we want? If you have seen any that look n...
/keyboards#mechanical-keyboards
49 5159 39
New
AstonJ
General Dev>Hardware

Planck vs Preonic vs Subatomic (Keyboards)
I ended up cancelling my Moonlander order as I think it’s just going to be a bit too bulky for me. I think the Planck and the Preonic (o...
/keyboards#mechanical-keyboards#ortholinear#planck#preonic
105 14250 47
New
Exadra37
Linux>Questions

What is the most minimalist Linux server distro?
I am asking for any distro that only has the bare-bones to be able to get a shell in the server and then just install the packages as we ...
#linux#servers
66 21231 24
New
First poster: joeb
General Dev>In The News

Safari now supports File System Access API with private origin
The File System Access API with Origin Private File System. WebKit supports new API that makes it possible for web apps to create, open,...
webkit.org
#api#safari
43 2902 21
New
First poster: bot
General Dev>In The News

Introducing the ChatGPT/LLM error tracker
Large Language Models like ChatGPT say The Darnedest Things. The Errors They MakeWhy We Need to Document Them, and What We Have Decided ...
garymarcus.substack.com
#error#chatgpt
0 2757 0
New
PragmaticBookshelf
Community>In The Spotlight

Spotlight: Tammy Coron (Author) Interview and AMA!
Author Spotlight: Tammy Coron @Paradox927 Gaming, and writing games in particular, is about passion, vision, experience, and immersio...
/swift/book-apple-game-frameworks-and-technologies
36 3373 18
New
Back to top

Latest in Craft GraphQL APIs in Elixir with Absinthe

Craft GraphQL APIs in Elixir with Absinthe Portal ❯

Latest in Phoenix

Phoenix Portal ❯

Backend>Questions

Backend Questions ❯

Latest on Devtalk

Devtalk ❯

We ❤️ helpful members!

We reward our most helpful members via our MOTM scheme - by giving away a whopping 25 books per year!

Member of the Month

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

Honeybadger

Real-time error tracking, performance insights, and observability for devs.

Manning Publications

Develop your skills with books, videos, and courses.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

Categories:

Sub Categories:

Popular Portals

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

Honeybadger

Real-time error tracking, performance insights, and observability for devs.

Manning Publications

Develop your skills with books, videos, and courses.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

We're in Beta

About us Mission Statement See our Roadmap