Strapi GraphQL-安全性（标头bearer_token）

Question

Is there a way to secure GraphQL queries in Strapi?

I'm developing an application in Angular 6 (frontend) and Strapi (backend). Ideally, i'd like to only allow queries with an authorised bearer_token.

Cheers, Rodrigo

Answer 1

The Users and Permissions section of the admin panel is based on the controllers' actions, not of routes. Because default GraphQL queries use these actions, you can use the Users & Permissions section to manage GraphQL security rules.

If you want to add more custom logic or secure your custom GraphQL resolvers, take a look a this section of the documentation: https://strapi.io/documentation/guides/graphql.html#execute-a-policy-before-a-resolver .