Hacker News Reader

Comment by alexanderson | Hacker News Reader

The hipster stack is an interesting one. Elixir + Phoenix framework, GraphQL, React.

Honestly, though, I'm doing everything with GraphQL now. It is a huge benefit for all aspects of application stack design now.

View on HN

Did GraphQL fix the authorization problems? Locking resources and attributes to authorised users?

Using Apollo Server, I get around authentication with an auth query which updates the context object of the query with the auth token of the user. Then, any subsequent queries can use that auth token to authenticate the user and authorize it for the query themselves.

I've also seen it where the authentication is handled by middleware before GraphQL even touches the request. I figure those two methods work for about every use case.

I do auth with a simple Ajax form and make all of my graphql calls take an auth header. Auth is really somewhat orthogonal to graphql. You can do it with graphql or not, up to you.

No more than HTTP or SQL fixes these problems on their own.

there is an idea for a joke-site slash kafkaesque sadomasochistic torture challenge generator. Hipster Stack Generator.

>Phoenix Absinthe Vue.js TypeScript Apollo Ethereum

Do you have any example projects or resources you used for getting everything working together nicely? I have tinkered with that setup a bit but haven't come up with something I love yet.

You are living the dream :)

Reply on news.ycombinator.com