Hey guys, I have read about the

authentication

&

authorization

basics (https://www.prisma.io/tutorials/graphql-rest-authentication-authorization-basics-ct20) and there is something I don't understand. I understand the difference between these two but solves

graphql-shield

both of them or just the authorization? I also looked into the

graphql-auth

example (https://github.com/prisma/prisma-examples/tree/master/node/graphql-auth). It seems like I just need

graphql-shield

which protects my routes. Is that correct? Thank you! 🙂

Yes, that is correct. In graphql they are not called routes though, they are called resolvers.