Build centralized GraphQL authorization with Apollo GraphOS
Blog post from Apollo
Apollo GraphOS is now generally available, enabling centralized authorization enforcement across any number of connected services in the graph. This eliminates the trade-off between flexibility and scalability in GraphQL APIs, allowing for durable, graph-native access control using directives such as `@requiresScopes` and `@authenticated`. With GraphOS, authz enforcement can be defined declaratively, optimizing query execution and improving defense-in-depth, while also eliminating unauthorized subqueries and deduplicating simultaneous subqueries. The feature is now available in preview for all customers on the GraphOS Enterprise plan running self-hosted instances of Apollo Router, and can be tried out for free for 28 days by non-enterprise customers.