I am not sure if I understand what you by the "frontend server"? I think Tailcall is closer to AppSync than Amplify.

Second part of your question: You can define a set of "allowed headers" that will be automatically forwarded upstream. In your case, you can set the allowed headers to `Authorization`.

Link to the doc:

https://tailcall.run/docs/guides/operators/#allowedheaders