graphql / graphql/graphql.github.io

Schema Diffing for Authorization

Ouverte
#733 0 commentaires 1 réaction 0 personnes assignées Voir sur GitHub
💬 Feedback
Langage dominant
TypeScript
Étoiles
889
Forks
1.5k
Merge moyen
4 j 12 h
PR mergées (30 j)
21

Description

After briefly discussing this approach in GraphQL-spec (https://github.com/graphql/graphql-spec/issues/592) I realized that this should instead be added as best-practice and not necessarily be part of the spec. Since the initial RFC, I have also added this information in "graphql-rules", available here: (https://graphql-rules.com/rules/authorization-schema-diffing) {https://github.com/graphql-rules/graphql-rules/pull/13}

As of now graphql.org suggests a single method of authorization; however in practice I have had to implement a different approach to address various concerns which I have discussed in the links mentioned before.

The Schema diffing approach can be likened to an API Gateway implementation of authorization and has it's benefits; as such I suggest that we include this approach in the knowledge base so that it can be more widely used and discussed.

Guide de contribution

Ouvrir le guide de contribution

Piste de recherche

Examinez les recommandations existantes relatives à l’autorisation sur graphql.org ainsi que la règle graphql-rules liée, puis localisez le point d’entrée du contenu de la base de connaissances du site. La tâche est considérée comme terminée lorsque l’approche de comparaison des schémas est documentée comme bonne pratique aux côtés de la méthode existante et que sa justification est claire.

Rédigé par le modèle d'indexation à partir du texte de l'issue.

Évaluation

Stack technique
graphql, typescript
Domaine
api, authorization, documentation
Type d'issue
Documentation
Difficulté
4/5
Temps estimé
3-5 jours
Activité
À l'abandon
Clarté
À clarifier
Accessibilité débutants
30/100

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.