And maybe another question as well, how secure is the user authentication graphcool provides in comparison to a more heavy-weight solution like AWS Cognito? Is there anything specifically I should watch out for?

@rein the main thing I've noticed is you have to be careful when writing your serverless functions. You need to check authentication and whether or not the user has the right privileges. The api (

const api = fromEvent(event).api('simple/v1')

) defaults to root

Thanks @max Ill keep that in mind. I'm a bit lost in choice between AWS AppSync and the new GraphCool API. Both require more configuration but on different fronts.

@reinyeah not easy. I haven't looked into it. I am probably going to use the Graphcool API as I imagine it'll be easier to integrate.

well, I got into the AppSync beta on sunday and so far, Ive been trying to wrap my head around the AWS ecosystem since its not just a matter of using AppSync as I first thought. You still need to configure Cognito, DynamoDB, IAM, ... before you can really make use of it.

@rein did you ever figure out the facebook auth setup you were working on? i have also struggled to get this working.

@adamibaker Yup, well, depending on what you need but yes, I got it working. Ill message you in PM.