Home / Companies / Wundergraph / Blog / Post Details
Content Deep Dive

Announcing Field Level Authorization for GraphQL Federation with Cosmo Router

Blog post from Wundergraph

Post Details
Company
Date Published
Author
Jens Neuse
Word Count
2,579
Language
English
Hacker News Points
-
Summary

The Cosmo Router has added field-level authorization to its Open Source GraphQL Federation Router. This feature allows teams to define their Subgraph Schemas independently, including their security policies, and enables a policy-as-code workflow for controlling access to federated GraphQL APIs. The router uses a matrix multiplication approach to merge scopes across Subgraphs, providing a more secure and auditable way of managing authorization logic. With this feature, developers can ensure that their Subgraphs implement security policies correctly, without unknowingly disabling the intended policy of another team. The Cosmo Router is now available in its latest version, with no special license required for this feature.