Blog
Notes on GraphQL caching, security and performance at the edge.
-
Resolver-level GraphQL security is already too late
Depth limits and auth checks written in your resolvers fire too late and live too scattered. Why GraphQL's real security boundary belongs at the edge, in front of the origin.
#graphql #security #edge #dos #authorization -
Why you can't just put a CDN in front of GraphQL
A GraphQL CDN sounds simple, but caching GraphQL breaks HTTP's rules. Why invalidation (not key generation) is the real problem, and what changes at the edge.
#graphql #caching #edge #performance #cdn