Thank you! I need some advice!

[jakelacey2012]

trafficstars

Thank you for creating this!! I've been looking everywhere for something like this!

I hope you don't mind me opening up this issue, I just wanted to open up a channel of communication in getting some advice on authentication/auth with graphQL.

I have one opening question and that is would you recommend using a separate 'server' for checking if a token exists and if the user has those permissions?

Thank you again 👍

[mostr]

Hey, nice to see it's helpful to someone. Not sure whether I understand your question about the service, could you please tell me more about that?

[jakelacey2012]

Thanks for getting back to me.... Sorry that was a typo a meant server.

But let me explain a little further anyway. :) A authentication server which would receive a token from the graphQL server and resolve that into user info and roles/permissions and apply that to the context. Would you recommend doing that rather than having the users exposed directly to the graphQL server?