Articles
This is a somewhat older but still important article. GraphQL authorization is crucial for building secure APIs. The author emphasizes GraphQL's flexibility, enabling developers to fetch only the data needed while maintaining granular control over access permissions. The guide explores various authorization methods, including JWT authentication and role-based permissions. It highlights the importance of testing and monitoring authorization logic to ensure its effectiveness in protecting sensitive data.
In his latest note, Jordan Eldredge dives into one of his first projects after joining the Relay team. He worked on a @required directive, which allowed clients to specify how to handle possible null values. Teams at Yelp and Netflix worked on something similar, resulting in the Client Controlled Nullability spec proposal.
Tools & Open Source
The GraphiQL team just released a new version, which improves support for defer/stream. If you're using GraphiQL in your own tools, make sure to update, and let the team know about any suggestions you might have!
Videos
Building scalable and maintainable APIs becomes increasingly important as businesses expand and applications grow in complexity. GraphQL has emerged as a powerful tool for building flexible and efficient APIs. However, managing a monolithic GraphQL API can become challenging as your applications and teams grow. Michael Staib will explore the benefits of building distributed GraphQL APIs in this talk. He covers the basics of GraphQL federation and how it allows you to break up your GraphQL schema into smaller, more manageable pieces. He'll also dive into some of the challenges of building distributed GraphQL APIs, such as schema stitching and resolver conflicts, and explore some of the best practices for overcoming them.
Events
GraphQLConf – is the official conference produced by the GraphQL Foundation that brings together the global community of GraphQL developers, leaders and innovators to further the education, adoption and advancement of GraphQL implementations in the industry. In the 8 years of GraphQL being around, we have seen adoption across some of the largest organizations globally with homegrown implementations, open source tooling and several vendor solutions that have enabled the ease of adoption, implementation and management of GraphQL. In the 3 days of workshops, keynotes and talks from the ecosystems, GraphQLConf aims to be the forum where we bring the community together to share and learn about what’s working and where we need to innovate & collaborate to help business succeed with GraphQL.
