I have had good results with https://github.com/maticzav/graphql-shield but I am also keeping an eye on https://github.com/prismagraphql/graphql-middleware as it is written by the prisma team but isn't ready for production just yet.