the

Post

type is imported from the database schema so it doesn’t have to be redefined (https://github.com/graphql-boilerplates/node-graphql-server/blob/master/advanced/src/schema.graphql#L1). the

User

type is “redefined” by without the

password

field to not expose it through the API