I think it would be good to give tutorial that is most needed in production such as auth, fileupload, multipart upload. I am looking for these three currently.

agree, I haven’t found a truly great example yet

I am willing to provide jwt token and check in each stage when auth is needed like shown in the medium.

Yeah in m case I’d like to just verify the token and add the resolved user into the context

I don’t quite know how to achieve that if I understand correctly. Currently, I think you should check the permission inside the query.

it is layered. In my case I want to first validate the authtoken itself before graphql gets involved. And then once that is achieved I’d like to run permission checks on queries based on custom directives

I see. So you want to achieve like what we normally used in node with jwt and set this in middleware of the express.

jep, right now I’m doing it in the context resolver when initializing apollo server

Someone tried to achieve things like that here https://www.prisma.io/forum/t/authentication-with-graphql-yoga-prisma-and-middleware/2285. However, I tried this and couldn’t get what I want.

the only thing I found was this one: https://medium.com/react-native-training/building-chatty-part-7-authentication-in-graphql-cd37770e5ab3

Yeah this is almost the same approach as what I’ve shared.

yeah

Yeah I’ve seen that. However, I don’t quite like to add more stuff since I feel quite too much now lol.

interesting, yeah with the exception that I don’t have to generate the tokens

I would just stay for previous practice since I just want to move on to next thing.

yeah similar, at the same time I want to do it right as well

Check out graphql-shield from @matic

yeah we were talking about it, had no clue he’s here! Hiiii 🙌

We need tutorial for uploading file and multipart-upload which makes able to upload both the content and file together.