Is there somebody who has only GraphQL auth?

We do the auth in the interceptor pipeline; the auth occurs after parsing the query such that we can apply rules about which api keys can access which operations.

If the way interceptors and routes work in lacinia-pedestal seems complicated, it's because we have that need to inject interceptors and sometimes replace the default interceptors.

I thin I want to have login (auth) separate from graphql, because for API integrations I will have generated tokens like in github. So this tokens can be used with graphql directly, while web browser will use sessions in ring. Does it make sense?

So there is no way to login and get some data in 1 graphql query. I don’t want to have such option. For that purpose people should use generated tokens.

Summary up: for web browsers: 1) login with REST and save user id in session 2) query with graphql for API integrations 1) generate tokens 2) use tokens with graphql directly

Do you see how can it be done better?

firstly you can use an api gateway to take care of auth

What do you mean?

https://www.3scale.net/ this kind of thing

what it doest in short words?

https://microservices.io/patterns/apigateway.html

does auth, rate limiting and various other conveniences

hmm is it not what graphql do?

graphql answers data queries. This gives you a separation of concerns.

I mean it is like single entry point

Probably I miss something in that context. Do I?

hmm on the other hand it can be done in graphql only. Login which return session token or something ike that

ehh choices…. choices..

(defn start-server
  [_]
  (let [server (-> schema
                   (lp/service-map {:graphiql true})
                   http/create-server
                   http/start)]
    (browse-url "")
    server))

I can’t find it in the doc

I have no idea what pedestal (lp/service-map {:graphiql true}) do

Hmm maybe lacinia support it only for pedestal

yeah it looks like I have to use pedestal with lacincia

if you know if it is possible with ring please let me know 🙂

It should be possible but you have to hook various bits and pieces together yourself

If you see the source of lacinia-pedestal it should be relatively obvious what’s going on

*in simple way 😉 I don’t want to write my own 100 lines for that 😉

:)

heh seeing source code of lacincia-pedestal my conclusion is I want to use pedestal for dev 😉

Even if I have never used it 😉

But thanks, it confirms there is no ring solution

That I know of :)

https://apis.guru/graphql-voyager/ do you recommend any tool like that, but instead paste schema fill field with URI?

oh it already can do it . Read it from issue.

Do you set Access-Control-Allow-Origin: * for graphql HTTP headers?

It sounds risky, but on the other hand how use graphql without this