Company
Date Published
Author
Vivek Ravishankar
Word count
789
Language
English
Hacker News points
None

Summary

Apollo GraphOS is now generally available, enabling centralized authorization enforcement across any number of connected services in the graph. This eliminates the trade-off between flexibility and scalability in GraphQL APIs, allowing for durable, graph-native access control using directives such as `@requiresScopes` and `@authenticated`. With GraphOS, authz enforcement can be defined declaratively, optimizing query execution and improving defense-in-depth, while also eliminating unauthorized subqueries and deduplicating simultaneous subqueries. The feature is now available in preview for all customers on the GraphOS Enterprise plan running self-hosted instances of Apollo Router, and can be tried out for free for 28 days by non-enterprise customers.