As it’s unbundled it doesn’t have (on purpose I think) a few things for a proper production deployment.
I’m working on a GraphQL front end server (Bunjil) designed to be the public bastion server in front of a Prisma/Prisma Cloud backend (though it works with any and multiple graphQL servers).
It’s probably too early to share this as I’m still writing the documentation, but here it is anyway.
The main additions are an authentication hook, and Policy Based Access Control similar to AWS IAM. I’ve found this style of authorisation amazingly powerful with GraphQL.
This gives you the ability to give a role access to say all types, or everything on the user type except ‘password’. Or block access to certain mutations.
I’m looking at how to hide specific mutations from the final scheme (to block ‘allUsers’ for example).
As most of the docs are still being written, the main two pages with more info are the api specs. The front page has a simple usage example.