Jeff Clary

@michaelstaib, can you verify whether I am right above that authorization does not currently apply to the `_entities` query? Thanks.

It seems like this makes HotChocolate Apollo federation a no-go for most use cases. Authorization is not optional. I hope the answer isn't to switch to fusion.

> I couldn't use `ApplyPolicy.Validation` but worked around with with > > ```cs > .AddQueryType(d => > { > d.Name("Query").Authorize(); > d.Extend().OnBeforeCompletion((ctx, definition) => > { > ... > entityFieldDescriptor.Authorize();...