graphgate
graphgate copied to clipboard
JWT Authentication support
JWT Authentication support
Hey there, thanks for the amazing initiative. It's exciting to see Apollo Federation being implemented in Rust!
Just one question: are there any plans to implement JWT Auth, just like it's done in the original Apollo Federation? https://www.apollographql.com/blog/setting-up-authentication-and-authorization-with-apollo-federation/
If it's not supported, are there any plans to support that? What would the API (read: config) look like? :)
I recommend you use forward headers and have the services validate the JWT instead.
If you really want to make sure no requests are executed without auth, you should put something in front of the gateway such as pomerium, oathkeeper ambassador etc