Securing Fields

Learn how to enforce authorization on particular fields.

We'll cover the following...

Since we now have a way to get the current user, we need to enforce authorization on particular fields to check the context. Knowing the current user also gives us the ability to retrieve associated records in our resolvers and return user-specific information.

Inline authorization

Before we let customers anywhere near this API, we need ...